gazagnaire.org / unikernels
Example mirage-eio unikernels
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

unikernels / bin / network / tls-client
6 files
README.md
dune
setup.sh
tls-client.gif
tls-client.t
unikernel.ml
README.md

tls-client#

tls-client unikernel demo

A validated TLS client over the guest's own network stack. It resolves a host, races candidate addresses with Happy Eyeballs, authenticates the certificate against the host trust store, and sends an HTTP request over the TLS flow.

This is the useful secure-client composition: DNS, dual-stack connection selection, trust anchors, hostname verification, and an application protocol all remain explicit.

By default the certificate is verified against the bundled trust store. For a local self-signed peer, --address can select its IP while --host remains the TLS name; --insecure disables certificate verification explicitly and should only be used for that local development case.

dune exec unikernel-tls-client -- \
  --ipv4-gateway 10.0.0.1 --host one.one.one.one