4 ms·
Anyone have an example of good cert verification in Java? The concept at https://github.com/iSECPartners/ssl-conservatory https://github.com/iSECPartners/ssl-co
by adamfisk 14y ago
Anyone have an example of good cert verification in Java? The concept at https://github.com/iSECPartners/ssl-conservatory https://github.com/iSECPartners/ssl-conservatory is great, but it needs examples in more languages. Our case is pretty weird (some self-signed certs between peers, cert pinning of sorts in that we only accept equifax as a root signer, no default signing authorities accepted), but anyone see holes in the authenticate method of our trust manager at:
https://github.com/getlantern/lantern/blob/master/src/main/java/org/lantern/LanternTrustManager.java https://github.com/getlantern/lantern/blob/master/src/main/j...
? This code is intended for deployment in potentially dangerous regions for getting around government censors.
Thanks.