[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE'
From: |
Ludovic Courtès |
Subject: |
[Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE' |
Date: |
Sat, 12 May 2007 16:56:22 +0200 |
User-agent: |
Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux) |
Hi,
Simon Josefsson <address@hidden> writes:
> Oh. I see, bad theory then. Hm. Have you loaded the proper CA cert in
> the server? The server sends over some information about the known CA
> certs, and if that doesn't match the user's certificate, the client
> won't send its user certificate.
Actually, you were right: my power cable was not quite plugged in. ;-)
Adding a `set_x509_trust_file ()' call on the server side fixed the
problem.
I was not expecting such behavior, though. Roughly, I had copied my
OpenPGP example (where `GNUTLS_CERT_REQUIRE' worked fine) and replaced
"openpgp" with "x509". The fact that we need to specify a trust file in
X.509 and not in the OpenPGP case for `GNUTLS_CERT_REQUIRE' to work
creates a slight asymmetry.
Thanks!
Ludovic.
- [Help-gnutls] X.509 authentication and `GNUTLS_CERT_REQUIRE', Ludovic Courtès, 2007/05/11
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Simon Josefsson, 2007/05/11
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Ludovic Courtès, 2007/05/11
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Simon Josefsson, 2007/05/12
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE',
Ludovic Courtès <=
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Simon Josefsson, 2007/05/13
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Ludovic Courtès, 2007/05/14
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Simon Josefsson, 2007/05/14
- [Help-gnutls] Re: X.509 authentication and `GNUTLS_CERT_REQUIRE', Ludovic Courtès, 2007/05/14