3 ms·
Unfortunately a lot of documentation and tooling for TLS apis are horrible. For example when working with Apple's Network.Framework, I have to drop to C and us
by willtemperley 1y ago
Unfortunately a lot of documentation and tooling for TLS apis are horrible.
For example when working with Apple's Network.Framework, I have to drop to C and use functions like "sec_protocol_options_add_tls_application_protocol". Maybe the new beta framework is better.
Or if I want to get a certificate hash on the command line in a usable format,
I'd have to run
"openssl x509 -in server.crt -noout -fingerprint -sha256 | sed 's/://g' | cut -d= -f2"
Networking and security is still a dark art and it shouldn't be.