These patches fill in a couple more capabilities needed by the Chrome OS client. The [RFC] patch is unfinished; I'll do the rest once we agree on the API. Other missing pieces include: - PKCS#11 or equivalent, for using hardware-backed certs. Note that there are no shared libraries on PNaCl, which complicates matters. - GnuTLS support? This compiles but crashes; needs debugging. - Proper handling of MTU changes. Kevin Cernekee (6): dtls: Fix memcmp() arguments in MTU detection code NaCl: Disable IPV6_PATHMTU getsockopt() call Allow OC_CMD_PAUSE to abort connection attempts library: Add reconnected() callback library: Add openconnect_get_dnsname() [RFC] library: Add openconnect_get_peer_cert_chain() dtls.c | 6 +-- .../infradead/libopenconnect/LibOpenConnect.java | 2 + jni.c | 24 ++++++++++ libopenconnect.map.in | 4 ++ library.c | 11 +++++ openconnect-internal.h | 2 + openconnect.h | 36 ++++++++++++++ openssl.c | 56 ++++++++++++++++++++-- ssl.c | 6 ++- 9 files changed, 140 insertions(+), 7 deletions(-) -- 1.9.1
