Add an option (tls_ca_subject) to check the subject of the root certificate, to avoid attacks with leaf certificates generated by compromissed or malicious certificate authorities, this is a key pinning mechanism
.idlebiffrc
patch 7cf737ec305ade9759d13a9fa2f5ef70b6158c45
Author: Enrique D. Bosch <presidev@AT@gmail.com>
Date: Wed Jun 8 00:14:13 CEST 2016
* Add an option (tls_ca_subject) to check the subject of the root certificate, to avoid attacks with leaf certificates generated by compromissed or malicious certificate authorities, this is a key pinning mechanism
diff -rN -u old-idlebiff/.idlebiffrc new-idlebiff/.idlebiffrc
--- old-idlebiff/.idlebiffrc 2024-05-19 00:33:35.945421761 +0200
+++ new-idlebiff/.idlebiffrc 2024-05-19 00:33:35.949421769 +0200
@@ -22,6 +22,7 @@
tls_validate_cert=1
tls_ca_dir=
tls_ca_file=
+tls_ca_subject=
tls_client_cert=
tls_client_key=
tls_ciphers=DEFAULT:!SSLv3