/ 
HTTP-PublicKeyPins-0.05
River stage zero No dependents
/ HTTP::PublicKeyPins

NAME

HTTP::PublicKeyPins - Generate RFC 7469 HTTP Public Key Pin (HPKP) header values

VERSION

Version 0.05

SYNOPSIS

Make it more difficult for the bad guys to Man-In-The-Middle your users TLS sessions

use HTTP::Headers();
use HTTP::PublicKeyPins qw( pin_sha256 );

...
my $h = HTTP::Headers->new();
$h->header( 'Public-Key-Pins-Report-Only',
        'pin-sha256="'
      . pin_sha256('/etc/pki/tls/certs/example.pem')
      . '"; pin-sha256="'
      . pin_sha256('/etc/pki/tls/certs/backup.pem')
      . '"; report-uri="https://example.com/pkp-report.pl' );

DESCRIPTION

This module allows the calculation of RFC 7469 HTTP Public Key Pin header values. This can be used to verify your TLS session to a remote server has not been hit by a Man-In-The-Middle attack OR to instruct your users to ignore any TLS sessions to your web service that does not use your Public Key

EXPORT

pin_sha256

This function accepts the path to a certificate. It will load the public key from the certificate and prepare the appropriate value for the pin_sha256 parameter of the Public-Key-Pins value.

SUBROUTINES/METHODS

None. This module only has the one exported function.

DIAGNOSTICS

Failed to open %s for reading

Failed to open the supplied SSL Certificate file

Failed to read from %s

Failed to read from the supplied SSL Certificate file

%s is not a PEM encoded SSL Certificate

The supplied input file does not look like a SSL Certificate File. An SSL Certificate file has the following header

-----BEGIN CERTIFICATE-----
MII

CONFIGURATION AND ENVIRONMENT

HTTP::PublicKeyPins requires no configuration files or environment variables.

DEPENDENCIES

HTTP::PublicKeyPins requires the following non-core modules

 Crypt::OpenSSL::X509;
 Crypt::OpenSSL::RSA;
 Digest

INCOMPATIBILITIES

None known.

SEE ALSO

RFC 7469 - Public Key Pinning Extension for HTTP

AUTHOR

David Dick, <ddick at cpan.org>

BUGS AND LIMITATIONS

Please report any bugs or feature requests to bug-http-publickeypins at rt.cpan.org, or through the web interface at http://rt.cpan.org/NoAuth/ReportBug.html?Queue=HTTP-PublicKeyPins. I will be notified, and then you'll automatically be notified of progress on your bug as I make changes.

SUPPORT

You can find documentation for this module with the perldoc command.

perldoc HTTP::PublicKeyPins

You can also look for information at:

LICENSE AND COPYRIGHT

Copyright 2015 David Dick.

This module is free software; you can redistribute it and/or modify it under the same terms as Perl itself. See perlartistic. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.