Skip to content

Commit

Permalink
Update the certificate build directions so that the "fred" certificat…
Browse files Browse the repository at this point in the history
…e would work.
  • Loading branch information
ejohnstown committed Mar 27, 2024
1 parent 698fb5d commit ff071a2
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -492,9 +492,13 @@ authenticating a user.
To compile wolfSSH with X.509 support, use the `--enable-certs` build option
or define `WOLFSSH_CERTS`:

$ ./configure --enable-certs
$ ./configure --enable-certs CPPFLAGS=-DWOLFSSH_NO_FPKI
$ make

For this example, we are disabling the FPKI checking as the included
certificate for "fred" does not have the required FPKI extensions. If the
flag WOLFSSH_NO_FPKI is removed, you can see the certificate get rejected.

To provide a CA root certificate to validate a user's certificate, give the
echoserver the command line option `-a`.

Expand Down

0 comments on commit ff071a2

Please sign in to comment.