Skip to content

Commit ff071a2

Browse files
committed
Update the certificate build directions so that the "fred" certificate would work.
1 parent 698fb5d commit ff071a2

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

README.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -492,9 +492,13 @@ authenticating a user.
492492
To compile wolfSSH with X.509 support, use the `--enable-certs` build option
493493
or define `WOLFSSH_CERTS`:
494494

495-
$ ./configure --enable-certs
495+
$ ./configure --enable-certs CPPFLAGS=-DWOLFSSH_NO_FPKI
496496
$ make
497497

498+
For this example, we are disabling the FPKI checking as the included
499+
certificate for "fred" does not have the required FPKI extensions. If the
500+
flag WOLFSSH_NO_FPKI is removed, you can see the certificate get rejected.
501+
498502
To provide a CA root certificate to validate a user's certificate, give the
499503
echoserver the command line option `-a`.
500504

0 commit comments

Comments
 (0)