Hello everyone, i want to write an TLS server. Therefore i'd like to use the openssl c api. The server needs to support the tls extension "Certificate Status Request" and "Trusted CA Indication" from RFC 6066. Does someone know a good tutorial on using tls extensions with openssl or has already expierence on that? The tls1.h Header has some defines which use the SSL_ctrl or SSL_CTX_ctrl functions. (e.g. #define SSL_CTX_set_tlsext_ticket_keys(ctx, keys, keylen) \ SSL_CTX_ctrl((ctx),SSL_CTRL_SET_TLSEXT_TICKET_KEYS,(keylen),(keys))) Do i have to write my own ssl_crtl function to use all the defines?
Hope someone can help me. Thanks, Daniel