Re: patch proposal: ssl_c_cert

2014-05-22 Thread Jarno Huuskonen
Hello, On Fri, May 09, Willy Tarreau wrote: So basically the output format could be built using this string : ssl_c_cert,pem(CERTIFICATE) What kind of argument the CERTIFICATE should be ? ARGT_STR / ARGT_UINT ? With : - ssl_c_cert outputting raw binary - pem(type) being the

Re: patch proposal: ssl_c_cert

2014-05-12 Thread Jarno Huuskonen
Hi Willy, On Fri, May 09, Willy Tarreau wrote: This patch should be compatible with apache/mod_ssl (RequestHeader set SSL_CLIENT_CERT %{SSL_CLIENT_CERT}s) (newlines in the pem cert are replaced with space chars). I'm wondering whether there is a risk that this same cert could be used

Re: patch proposal: ssl_c_cert

2014-05-09 Thread Willy Tarreau
Hello Jarno, On Tue, May 06, 2014 at 01:36:44PM +0300, Jarno Huuskonen wrote: Hello, This is a patch (proposal) to include ssl_c_cert keyword to add client certificate (in pem format) to backend requests. This is useful for offloading ssl for applications that need access to client

patch proposal: ssl_c_cert

2014-05-06 Thread Jarno Huuskonen
Hello, This is a patch (proposal) to include ssl_c_cert keyword to add client certificate (in pem format) to backend requests. This is useful for offloading ssl for applications that need access to client certificate (for example with something like tomcat sslvalve: