CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2024/12/10 01:40:30
Modified files:
lib/libtls : tls.h tls_conninfo.c tls_internal.h tls_peer.c
tls_verify.c
Log message:
Provide tls_peer_cert_common_name()
There is currently no sane way of getting your hands on the common name or
subject alternative name of the peer certificate from libtls. It is possible
to extract it from the peer cert's PEM by hand, but that way lies madness.
While the common name is close to being deprecated in the webpki, it is
still the de facto standard to identify client certs. It would be nice to
have a way to access the subject alternative names as well, but this is a
lot more difficult to expose in a clean and sane C interface due to its
multivaluedness.
Initial diff from henning, with input from beck, jsing and myself
henning and bluhm have plans of using this in syslogd.
ok beck
