Am 11.11.2011 23:17, schrieb SciFi:
Ah. So. I guess the thing to remember is something like this: Us mere mortals wouldn't normally need to worry about matching these things together properly. We would expect things to "just work" by the code doing whatever "magic" is required. ;)
That's right ;) Can I make a mac-users joke now? I better not, lol.
For us geeks trying to iron-out this present anomaly, I still cannot find what the "proper name" should be for the gn and gmane certs/pems.
That's easy, the same hostname you gave as a hostname in pan. I build an internal map. But as I said earlier, you're right here, I'll make that dynamic with a file-based map. So even if you wanted to change the certificate by hand, you could do that with just changing the appropiate key in preferences.xml.
However, I suppose discovering the aw name was more of an "accident" it seems to work that way. ;) I then suppose the OpenSSL APIs will have something to offer for the app to keep-track of these certs? (Other software, that support SSL, seem to handle all this tracking automatically. The app only needs to know whether to use SSL-mode or not.)
"Other" OpenSSL APIs? I guess they just check the hostname for a match. For example http://www.jbinup.com/. _______________________________________________ Pan-devel mailing list Pan-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/pan-devel
