Best practice for client cert name checking

2012-10-06 Thread Charles Mills
I have recently written a product that incorporates SSL/TLS server code that processes client certificates. I designed what I thought made sense at the time but now I am wondering if what I did was best. In the product's configuration file the sysadmin may optionally include a whitelist of client

Re: Best practice for client cert name checking

2012-10-06 Thread Jeffrey Walton
On Sat, Oct 6, 2012 at 9:52 AM, Charles Mills charl...@mcn.org wrote: I have recently written a product that incorporates SSL/TLS server code that processes client certificates. I designed what I thought made sense at the time but now I am wondering if what I did was best. In the product's

RE: Best practice for client cert name checking

2012-10-06 Thread Charles Mills
Thanks. I'm a relative newbie to this whole topic. Can you point me to a resource that describes pin in the sense you use it below? The word is too common for the Google to be much help. Charles -Original Message- From: owner-openssl-us...@openssl.org

How to place signature into an X509 format

2012-10-06 Thread redpath
I have created EC Digital Signature and saved it in a file. Excerpt of code shown below for a message digest md unsigned int siglen = ECDSA_size(peckey); printf(Max signature length is %d \n,siglen); siglen = ECDSA_size(peckey); unsigned char *ptr = OPENSSL_malloc(siglen);

Re: Best practice for client cert name checking

2012-10-06 Thread Jeffrey Walton
On Sat, Oct 6, 2012 at 5:41 PM, Charles Mills charl...@mcn.org wrote: Thanks. I'm a relative newbie to this whole topic. Can you point me to a resource that describes pin in the sense you use it below? The word is too common for the Google to be much help. If you are using RSA, then the