aphyr/less-awful-ssl

Sssh no tears, only TLS now. For Clojure.

less-awful-ssl's Issues

Optional CA Cert

I am a mere mortal humbled by the inner complexities of SSL. Do I have to specify the ca-cert-file as an input to ssl-context? How to handle self-signed certificates?

release 0.1.1?

I know this is a super-young project, but your readme and clojars release are out of sync because of the namespace change. It'd probably be good to do another release.

Don't require PKCL12 to be a string file path

The type hint here prevents the use of a File, which is what we'd get if we used (-> <name.p12> io/resource io/file).

TLS 1.2 support

Hello.

In less-awful-ssl is used code (SSLContext/getInstance "TLS") which return SSL not TLS connection under some circumstances. SSL is not secure anymore and TLS 1.1 is not enough.
Reason of this behaviour described here:
https://stackoverflow.com/questions/29841610/will-sslcontext-getinstancetls-supports-tls-v1-1-and-tls-v1-2-also

and here:
https://stackoverflow.com/questions/1037590/which-cipher-suites-to-enable-for-ssl-socket/23365536#23365536

Can you make an update and put (SSLContext/getInstance "TLSv1.2")

Thanks.

Huge missed opportunity

Dude. Your name has multiple segments. Run with it.

(ns less.awful.css ..)

avoid JAXB dependency for base64

It would be possible to avoid the jaxb dependency using a similar approach outlined here: http-kit/http-kit#356

(defmacro base64-encode [bs]
  (if (try (import 'javax.xml.bind.DatatypeConverter)
           (catch ClassNotFoundException _))
    `(javax.xml.bind.DatatypeConverter/printBase64Binary ~bs)
    (do
      (import 'java.util.Base64)
      `(.encodeToString (java.util.Base64/getEncoder) ~bs))))

If you agree I'll prepare a PR.

Certificate revocation

Am I correct in understanding that this library doesn't support cert revocation?

Would it be possible to add a parameter to ssl-context to specify a CRL file?