Verify the server certificate against a stored copy.

[tlsproxy/tlsproxy.git] / src / tlsproxy.h

diff --git a/src/tlsproxy.h b/src/tlsproxy.h
index 9c908084945857c49275b4fa90ae0135d87e8530..c151344db84753e3b4a02119cfc2e003465973ac 100644 (file)
--- a/src/tlsproxy.h
+++ b/src/tlsproxy.h
@@ -39,6 +39,10 @@
  * "./certificate-hostname-proxy.pem" - we use this for the connection to the
  * client. */
 #define PROXY_SERVER_CERT_FORMAT "./certificate-%s-proxy.pem"
+/* The remote server certificate for the given hostname is stored in
+ * "./certificate-hostname-proxy.pem" - we make sure the server sends this
+ * certificate. */
+#define STORED_SERVER_CERT_FORMAT "./certificate-%s-server.pem"
 
 
 /* Proxy hostname and port if specified on the command line. */