-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
[QUIC] Add support for SslCertificateTrust #73053
Comments
Tagging subscribers to this area: @dotnet/ncl, @vcsjones Issue Details
While we might not be able to force the QUIC TLS backend to send the trusted list as part of TLS handshake, we can still implement the certificate validation part of the above mentioned PR. The prerequisite to that is making the
|
Tagging subscribers to this area: @dotnet/ncl Issue Details
While we might not be able to force the QUIC TLS backend to send the trusted list as part of TLS handshake, we can still implement the certificate validation part of the above mentioned PR. The prerequisite to that is making the
|
Tentatively assigned to Future, this probably is not critical for 7.0 but would be good for consistency. |
SslStream
supports some control over which certificates are to be considered as trusted. SeeSslStreamCertificateContext.Trust
and e.g. #55104.While we might not be able to force the QUIC TLS backend to send the trusted list as part of TLS handshake, we can still implement the certificate validation part of the above mentioned PR. The prerequisite to that is making the
SslStreamCertificateContext.Trust
public (Or at least visible to S.N.Q), same for internal members ofSslCertificateTrust
The text was updated successfully, but these errors were encountered: