Fix TLS code review issues: SSL cleanup, TLS 1.2 min, CA verify, deprecation guards, server --help, port validation, __thread io_ssl, shared accept loop

2026-07-16 16:56:33 +02:00
parent c5d739d160
commit 64be95a57f
10 changed files with 167 additions and 87 deletions
@@ -5,10 +5,12 @@
 #include <stdbool.h>

 bool tls_global_init(void);
-void tls_global_cleanup(void);

-bool server_create_tls(Server *server, const char *cert_path, const char *key_path);
+bool server_create_tls(Server *server, const char *cert_path,
+                        const char *key_path, const char *ca_path);
 bool server_listen_tls(Server *server, void (*handler)(int file_descriptor));
-bool client_connect_tls(Client *client, char *host, int port, const char *cert_path, const char *key_path);
+bool client_connect_tls(Client *client, char *host, int port,
+                         const char *cert_path, const char *key_path,
+                         const char *ca_path);

 #endif