View Source tls_certificate_check (tls_certificate_check v1.17.2)

Main API

Link to this section Summary

Functions

Returns the list of ssl:connect options necessary to validate the server certificate against a list of trusted authorities, as well as to verify whether the server hostname matches one in the server certificate.

Overrides the trusted authorities with a custom source.
Returns the list of trusted authorities.

Link to this section Types

-type option() :: ssl:tls_client_option().
-type override_source() ::
    {file, Path :: file:name_all()} | {encoded, binary()} | (CAs :: [public_key:der_encoded()]).

Link to this section Functions

-spec options(Target) -> Options
           when
               Target :: Hostname | URL,
               Hostname :: iodata(),
               URL :: iodata(),
               Options :: [option()].

Returns the list of ssl:connect options necessary to validate the server certificate against a list of trusted authorities, as well as to verify whether the server hostname matches one in the server certificate.

  • Target can be either a hostname or an HTTP URL, as iodata()
Link to this function

override_trusted_authorities(From)

View Source
-spec override_trusted_authorities(From) -> ok when From :: override_source().
Overrides the trusted authorities with a custom source.
-spec trusted_authorities() -> CAs when CAs :: [public_key:der_encoded(), ...].
Returns the list of trusted authorities.