Skip to content

Commit aa84950

Browse files
authored
Merge pull request #673 from anhu/fred
Change references in README.md from John to Fred.
2 parents 9204ae7 + ff071a2 commit aa84950

1 file changed

Lines changed: 9 additions & 5 deletions

File tree

README.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -492,23 +492,27 @@ authenticating a user.
492492
To compile wolfSSH with X.509 support, use the `--enable-certs` build option
493493
or define `WOLFSSH_CERTS`:
494494

495-
$ ./configure --enable-certs
495+
$ ./configure --enable-certs CPPFLAGS=-DWOLFSSH_NO_FPKI
496496
$ make
497497

498+
For this example, we are disabling the FPKI checking as the included
499+
certificate for "fred" does not have the required FPKI extensions. If the
500+
flag WOLFSSH_NO_FPKI is removed, you can see the certificate get rejected.
501+
498502
To provide a CA root certificate to validate a user's certificate, give the
499503
echoserver the command line option `-a`.
500504

501505
$ ./examples/echoserver/echoserver -a ./keys/ca-cert-ecc.pem
502506

503-
The echoserver and client have a fake user named "john" whose certificate
507+
The echoserver and client have a fake user named "fred" whose certificate
504508
will be used for authentication.
505509

506510
An example echoserver / client connection using the example certificate
507-
john-cert.der would be:
511+
fred-cert.der would be:
508512

509-
$ ./examples/echoserver/echoserver -a ./keys/ca-cert-ecc.pem -K john:./keys/john-cert.der
513+
$ ./examples/echoserver/echoserver -a ./keys/ca-cert-ecc.pem -K fred:./keys/fred-cert.der
510514

511-
$ ./examples/client/client -u john -J ./keys/john-cert.der -i ./keys/john-key.der
515+
$ ./examples/client/client -u fred -J ./keys/fred-cert.der -i ./keys/fred-key.der
512516

513517

514518
WOLFSSH APPLICATIONS

0 commit comments

Comments
 (0)