Expand description
Server-side TLS setup.
The control channel is TLS, like Murmur. We pin TLS 1.2 for the same reason
the P2 proxy does: the macOS Qt/OpenSSL Mumble client segfaults in its
post-handshake introspection when handed a TLS 1.3 session, and Murmur itself
negotiates 1.2 by default. See docs/STATUS.md (macOS client trap).
Structs§
- Identity
- A TLS certificate and its private key, in DER.
Functions§
- client_
certificate_ hash - Return Murmur’s lowercase SHA-1 digest of the immediate client certificate.
- install_
crypto_ provider - Install the ring crypto provider as the process default. Idempotent.
- server_
config - Build the server TLS config from an identity, pinned to TLS 1.2.