Skip to content

rustls::ServerCertVerifier should check remote_public_key #11

Description

@kpp

According to https://github.com/libp2p/specs/blob/master/tls/tls.md#libp2p-public-key-extension, the given remote_public_key should be checked inside ServerCertVerifier::verify_server_cert against P2pExtension::public_key:

The public host key allows the peer to calculate the peer ID of the peer it is connecting to. Clients MUST verify that the peer ID derived from the certificate matches the peer ID they intended to connect to, and MUST abort the connection if there is a mismatch.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions