File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -492,23 +492,27 @@ authenticating a user.
492492To compile wolfSSH with X.509 support, use the ` --enable-certs ` build option
493493or define ` WOLFSSH_CERTS ` :
494494
495- $ ./configure --enable-certs
495+ $ ./configure --enable-certs CPPFLAGS=-DWOLFSSH_NO_FPKI
496496 $ make
497497
498+ For this example, we are disabling the FPKI checking as the included
499+ certificate for "fred" does not have the required FPKI extensions. If the
500+ flag WOLFSSH_NO_FPKI is removed, you can see the certificate get rejected.
501+
498502To provide a CA root certificate to validate a user's certificate, give the
499503echoserver the command line option ` -a ` .
500504
501505 $ ./examples/echoserver/echoserver -a ./keys/ca-cert-ecc.pem
502506
503- The echoserver and client have a fake user named "john " whose certificate
507+ The echoserver and client have a fake user named "fred " whose certificate
504508will be used for authentication.
505509
506510An example echoserver / client connection using the example certificate
507- john -cert.der would be:
511+ fred -cert.der would be:
508512
509- $ ./examples/echoserver/echoserver -a ./keys/ca-cert-ecc.pem -K john :./keys/john -cert.der
513+ $ ./examples/echoserver/echoserver -a ./keys/ca-cert-ecc.pem -K fred :./keys/fred -cert.der
510514
511- $ ./examples/client/client -u john -J ./keys/john -cert.der -i ./keys/john -key.der
515+ $ ./examples/client/client -u fred -J ./keys/fred -cert.der -i ./keys/fred -key.der
512516
513517
514518WOLFSSH APPLICATIONS
You can’t perform that action at this time.
0 commit comments