I am looking at server certtifcate pinning (Spec: 
https://tools.ietf.org/html/rfc7469, testcase/example 
https://projects.dm.id.lv/Public-Key-Pins_test) .

Has any one wired this up already for Serf - or were would be the proper place* 
where one would have neatly re-joined headers and all that ? And 
could break out upon the first sign of trouble early & sensibly.

Suggestions and examples very welcome.

Dw.

* am currently using a bit of an dirty and late 'at the very end check' hack 
(via serf_bucket_request_get_headers() and a small side channel wired
up to serf_ssl_server_cert_chain_callback_set() - but cannot believe I need 
some 20k of code to just have serf do an https fetch.



Reply via email to