tthumbprint.7 - plan9port - [fork] Plan 9 from user space
 (HTM) git clone git://src.adamsgaard.dk/plan9port
 (DIR) Log
 (DIR) Files
 (DIR) Refs
 (DIR) README
 (DIR) LICENSE
       ---
       tthumbprint.7 (1125B)
       ---
            1 .TH THUMBPRINT 7
            2 .SH NAME
            3 thumbprint \- public key thumbprints
            4 .SH DESCRIPTION
            5 .PP
            6 Applications in Plan 9 that use public keys for authentication,
            7 for example by calling
            8 .B tlsClient
            9 and
           10 .B okThumbprint
           11 (see
           12 .MR pushtls (3) ),
           13 check the remote side's public key by comparing against
           14 thumbprints from a trusted list.
           15 The list is maintained by people who set local policies
           16 about which servers can be trusted for which applications,
           17 thereby playing the role taken by certificate authorities
           18 in PKI-based systems.
           19 By convention, these lists are stored as files in
           20 .B /sys/lib/tls/
           21 and protected by normal file system permissions.
           22 .PP
           23 Such a thumbprint file comprises lines made up of
           24 attribute/value pairs of the form
           25 .IB attr = value
           26 or
           27 .IR attr .
           28 The first attribute must be
           29 .B x509
           30 and the second must be
           31 .BI sha1= {hex checksum of binary certificate}.
           32 All other attributes are treated as comments.
           33 The file may also contain lines of the form
           34 .BI #include file
           35 .PP
           36 For example, a web server might have thumbprint
           37 .EX
           38 x509 sha1=8fe472d31b360a8303cd29f92bd734813cbd923c cn=*.cs.bell-labs.com
           39 .EE
           40 .SH "SEE ALSO"
           41 .MR pushtls (3)