tree 67ab5d20f9ebbd34ee8d9fec2dfc3d97297fd0f7
parent 7139e757b13212f3fd8e3f3f401018375fed0c61
author Florin Coras <fcoras@cisco.com> 1520297587 -0800
committer Dave Barach <openvpp@barachs.net> 1520429279 +0000

tls: enforce certificate verification

- add option to use test certificate in the ca chain
- add hostname to extended session endpoint fields and connect api
  parameters. If hostname is present, certificate validation is
  enforced.
- use /etc/ssl/certs/ca-certificates.crt to bootstrap CA cert. A
  different path can be provided via startup config

Change-Id: I046f9c6ff3ae6a9c2d71220cb62eca8f7b10e5fb
Signed-off-by: Florin Coras <fcoras@cisco.com>