------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1358
           Summary: Want a way to pull fields out of certificates
           Product: Exim
           Version: N/A
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: wishlist
          Priority: medium
         Component: String expansion
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


It's not easy to get at, say, the Issuer of the client certificate acquired
with tls_verify_hosts.   There are $tls_in_peerdn and $tls_in_sni but there is
not a general method.

Possibly an expansion item would work?  Eg.

  ${cert_extract {field}{cert}{found}{notfound}}

Where:
  field can expand to one of a list of well-known names, or an OID
  cert  can expand to "peer", "ocsp", a filename (?)
  found is expanded with $value, if the field was found

All details up for discussion.


-- 
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim 
details at http://www.exim.org/ ##

Reply via email to