Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Apache: Dev

mod_ssl / ssl_engine_ocsp.c customizations

 

 

Apache dev RSS feed   Index | Next | Previous | View Threaded


nm at michael-wessel

Jun 26, 2009, 6:55 AM

Post #1 of 2 (289 views)
Permalink
mod_ssl / ssl_engine_ocsp.c customizations

Dear list,

as I am new to this list, I don't know but hope questions regarding mod_ssl are welcome?

I am currently working on - dirty, please have mercy - customizations of mod_ssl and especially OCSP-handling for a specific project (on basis of Apache 2.3 code). As I am neither a seasoned C-coder nor familiar with OpenSSL libraries, I am having problems extracting the issuer name from an X.509 cert into a usable string format.

What I need to do:


· Write my own "static const char *extract_responder_uri()"

· Don't read responder uri from certificate, but from a file

· (Responder uri is connected with the issuer of the certificate in some other place - extracted and saved to file by other means...)

· File's name is equal to the issuer's DN - to my mind the most direct way to look it up

· So, I have to get the issuer name from the cert and build a filename to fopen(). That's the point where I am stuck because of type problems (how to get a char* or some string from an X509_NAME?)...

If this inquiry is off-topic, please give me a hint to where I could ask for help, or drop me a line, if more detail is required.

Any help is highly appreciated, thanks in advance!

Mit freundlichen Grüßen / Kind regards
Natanael Mignon

IT-Dienstleistungen: beraten | planen | umsetzen | betreiben
__________________________________________________________________________
michael-wessel.de Informationstechnologie GmbH
Krausenstraße 50
30171 Hannover
Germany
fon (+49) 511 260 911-0 (DW: - 13)
fax (+49) 511 318 039-9
eMail nm[at]michael-wessel.de<mailto:nm[at]michael-wessel.de>
web www.michael-wessel.de<http://www.michael-wessel.de/>
Bitte senden Sie wichtige E-Mails stets auch an service[at]michael-wessel.de<mailto:service[at]michael-wessel.de>, um sicherzustellen, dass diese zeitnah bearbeitet werden.

Geschäftsführer: Michael Wessel Dipl. Phys.
Amtsgericht Hannover
HR B 59031


jorton at redhat

Jul 2, 2009, 4:48 AM

Post #2 of 2 (231 views)
Permalink
Re: mod_ssl / ssl_engine_ocsp.c customizations [In reply to]

On Fri, Jun 26, 2009 at 03:55:27PM +0200, Natanael Mignon - michael-wessel.de wrote:
> I am currently working on - dirty, please have mercy - customizations
> of mod_ssl and especially OCSP-handling for a specific project (on
> basis of Apache 2.3 code). As I am neither a seasoned C-coder nor
> familiar with OpenSSL libraries, I am having problems extracting the
> issuer name from an X.509 cert into a usable string format.
>
> What I need to do:
>
>
> · Write my own "static const char *extract_responder_uri()"
>
> · Don't read responder uri from certificate, but from a file

This could be done by making mod_ssl run an optional external hook to
retrieve a responder URI given a certificate. I will try to find time
to add such a hook, or patches are welcome ;)

> how to get a char* or some string from an X509_NAME?

This kind of question is better off asked in openssl-users[at]openssl.org -
you can see lots of examples of how to do it in mod_ssl's
ssl_engine_vars.c however.

Regards, Joe

Apache dev RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.