THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHORS DISCLAIM ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.



This is a demo program for [libwebpki](https://github.com/briansmith/webpki).

[build.rs](build.rs) shows how to create a build script that embeds a set of
trust anchors into a program in a compact form, given a set of X.509 root
certificate files.

The function ```verify_cert``` in
[src/verify_tls_cert.rs](src/verify_tls_cert.rs) demonstrates how to use the
libwebpki API to verify a certificate.

You can build this with `cargo build`. Cargo will download libwebpki, *ring*,
and the other dependencies automatically as part of the build.

This program connects to the given server over TLS to extract its certificate
chain. After building the program, you can run it as so:

```
$ target/debug/verify_tls_cert briansmith.org
OK

$ target/debug/verify_tls_cert expired.badssl.com
CertExpired

$ target/debug/verify_tls_cert wrong.host.badssl.com
CertNotValidForName
```

This demo does not implement the full TLS protocol--it implements just enough
to extract the server's certificate chain.

License
=======

See [LICENSE](LICENSE). This project happily accepts pull requests without any
formal copyright/contributor license agreement. Pull requests must explicitly
indicate who owns the copyright to the code being contributed and that the code
is being licensed under the same terms as the existing libwebpki code.



Bug Reporting
=============

Please report bugs either as pull requests or as issues in [the issue
tracker](https://github.com/briansmith/verify_tls_cert/issues).



Online Automated Testing
========================

Travis CI is used for Linux and Mac OS X. Appveyor is used for Windows.

<table>
<tr><th>OS</th><th>Arch.</th><th>Compilers</th><th>Status</th>
<tr><td>Linux</td>
    <td>x86, x64<td>GCC 4.8, 4.9, 5; Clang 3.4, 3.5, 3.6</td>
    <td rowspan=2><a title="Build Status" href=https://travis-ci.org/briansmith/verify_tls_cert><img src=https://travis-ci.org/briansmith/verify_tls_cert.svg?branch=master></a>
</tr>
<tr><td>Mac OS X x64</td>
    <td>x86, x64</td>
    <td>Apple Clang 6.0 (based on Clang 3.5)</td>
</tr>
<tr><td>Windows</td>
    <td>x86, x64</td>
    <td>MSVC 2013 (12.0), 2015 (14.0)</td>
    <td><a title="Build Status" href=https://ci.appveyor.com/project/briansmith/verify-tls-cert/branch/master><img src=https://ci.appveyor.com/api/projects/status/g5erik7trb1ykx81/branch/master?svg=true></a>
</tr>
</table>