This is easy to do and I've done it before. You can get access to the certificate used in the SSL exchange, and using OpenSSL get to all the fields you need.
Chuck Wegrzyn Twisted Storage jayesh_08879 wrote: > > > > I want to access certain fields in the certificate to glean more > information about the client than whether they are trusted or not. > Looking at the code, it looks like I can set soap.fsslverify callback to > my own function and have access to the certificate that I need. > > Has anyone tried this? Is there any reason for me to worry breakage if I > did this? In fact, my implementation of fsslverify will return 'ok' just > like the ssl_verify_callback(). > > Thanks, > Jayesh > >
