Skip to content
This repository has been archived by the owner on Oct 25, 2022. It is now read-only.

Latest commit

 

History

History
23 lines (18 loc) · 995 Bytes

README.md

File metadata and controls

23 lines (18 loc) · 995 Bytes

URL: https://github.com/google/token_bind
Version: 0.10
License: Apache 2.0
License File: LICENSE

Description:
Provides support for token binding according to the following RFCs:

https://tools.ietf.org/html/draft-ietf-tokbind-protocol-18
https://tools.ietf.org/html/draft-ietf-tokbind-negotiation-10
https://tools.ietf.org/html/draft-ietf-tokbind-https-15

This token binding library links to OpenSSL to provide token binding negotiation over TLS, and provides high level functions needed to add token binding support to HTTP applications.

This is compatible with OpenSSL versions 1.1.0 and newer. It is implemented using the custom extension API in OpenSSL. Due to a minor issue (openssl/openssl#927) in this API, resumption in OpenSSL 1.1.0 is not compatible with this token binding library unless a 1-line patch is made (see example/custom_ext_resume.patch). This patch should be included in OpenSSL >= 1.1.0.

This is not an official Google product.