Dependencies on common certificates
Hello,
I've been interested in the QUIC protocol documentation, and have specifically been focusing on the security of the digital certificates within each handshake.
I noticed your source code contains four predefined certificates, known as "common certificates":
- Common cert 2a: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_2a.inc
- Common cert 2b: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_2b.inc
- Common cert 3a: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_3a.inc
- Common cert 3b: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_3b.inc
I was curious about what the functions are of these, and (if these are used), how can I supplement them for external certificates? I understand that http_client has the -C parameter to specify other certificates to use, but I have not had much luck with this.
Using gdb for debugging, I've been able to show that these common certificate files are being loaded, but I don't know if they are being actively used, so I wanted to ask you guys directly.
Any help would be greatly appreciated.