suzanne.soy/racket
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add some basic notes on using ssl securely

Browse Source
This commit is contained in:
Ryan Culpepper 2012-11-17 16:34:12 -05:00
parent 5cdb967251
commit c5f8aa41ee
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
collects/openssl/openssl.scrbl
View File

@ -42,6 +42,35 @@ value is @racket[#f] (library not loaded) will raise an exception.}
Either @racket[#f] (when @racket[ssl-available?] is @racket[#t]) or an
error string (when @racket[ssl-available?] is @racket[#f]).}
@; ----------------------------------------------------------------------
@section{Using SSL Securely}
SSL and TLS are client-server cryptographic protocols that enable
secure communication with remote hosts (called ``peers''). But SSL
must be properly configured in order to be secure.
The security of client programs using SSL generally depends
on the authentication of the server credentials, which requires proper
initialization of this library's client contexts. To use SSL securely,
a client program must at a minimum take the following steps:
@itemlist[
@item{create an SSL client context using @racket[ssl-make-client-context]}
@item{tell the context what certificate authorities to trust using
@racket[ssl-load-verify-root-certificates!]}
@item{turn on certificate verification using @racket[ssl-set-verify!]
(or check each connection individually using @racket[ssl-peer-verified?])}
@item{turn on hostname verification using
@racket[ssl-set-verify-hostname!] (or check each connection
individually using @racket[ssl-peer-check-hostname])}
]
@; ----------------------------------------------------------------------
@section{TCP-like Client Procedures}