3 ms·
The openssl api is still a painful, compare it with libtls which is much nicer. if I were to use something today I would probably use https://github.com/michael
by nwmcsween 6y ago
The openssl api is still a painful, compare it with libtls which is much nicer. if I were to use something today I would probably use https://github.com/michaelforney/libtls-bearssl https://github.com/michaelforney/libtls-bearssl which is a wrapper around bearssl that exposes a libtls api.
- agwa 6y agoYou should only use BearSSL when you control the server and the certificate that it uses, since BearSSL's certificate validation implementation is intentionally limited so that it can be more efficient on embedded devices at the cost of being unable to correctly handle all publicly-trusted certificates. See https://medium.com/@sleevi_/path-building-vs-path-verifying-implementation-showdown-39a9272b2820 https://medium.com/@sleevi_/path-building-vs-path-verifying-...