j3d1/esp-open-rtos
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge pull request #648 from phkehl/improve_docu

Browse source 
Improve documentation of http_get_bearssl example
This commit is contained in:
Ruslan V. Uss 2018-07-04 23:23:33 +05:00 committed by GitHub
commit 46499c0f26
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
examples/http_get_bearssl/http_get_bearssl.c
View file

@ -88,13 +88,26 @@ sock_write(void *ctx, const unsigned char *buf, size_t len)
* cert-root-ec.pem. * cert-root-ec.pem.
* *
* C code for hardcoded trust anchors can be generated with the "brssl" * C code for hardcoded trust anchors can be generated with the "brssl"
* command-line tool (with the "ta" command). * command-line tool (with the "ta" command). To build that tool run:
*
* $ cd /path/to/esp-open-rtos/extras/bearssl/BearSSL
* $ make build/brssl
* *
* Below is the imported "Let's Encrypt" root certificate, as howsmyssl * Below is the imported "Let's Encrypt" root certificate, as howsmyssl
* is depending on it: * is depending on it:
* *
* https://letsencrypt.org/certs/letsencryptauthorityx3.pem * https://letsencrypt.org/certs/letsencryptauthorityx3.pem
* *
* The generate the trust anchor code below, run:
*
* $ /path/to/esp-open-rtos/extras/bearssl/BearSSL/build/brssl \
* ta letsencryptauthorityx3.pem
*
* To get the server certificate for a given https host:
*
* $ openssl s_client -showcerts -servername www.howsmyssl.com \
* -connect www.howsmyssl.com:443 < /dev/null | \
* openssl x509 -outform pem > server.pem
*/ */
static const unsigned char TA0_DN[] = { static const unsigned char TA0_DN[] = {