add makeshift tls#16
Draft
manti09wasntavalible-source wants to merge 4 commits into
Draft
Conversation
i added the makeshift tls i was thinking of making and changed the status codes to not be 200 even on errors
|
oh yo whats good its me greetertron! i notice you're new around here. Thanks for making this PR, @cool-guy-awesome or @VirtuallyExisting will see it soon™! |
just updating with newer commits so there are minimal conflicts
Contributor
|
Maybe later |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
i added makeshift tls
this is untested by the way (i dont fell like modifying a client to work)
THIS BREAKS ALL PREVIOUSLY WORKING CLIENTS
to make a client work:
have the client generate ecc keys at startup
before conecting to the server in any way, make a http post request to (server)/api/key (it could crash the server if you dont do it before in the current state(i think this is patched)). the content should be your public key. the server should return its public key
encrypt all http content sent to the server with the servers public key
decrypt everything recieved with your private key