[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Pan-devel] at b2069b3 now -- I think I figured-out one little thing

From: Heinrich Mueller
Subject: Re: [Pan-devel] at b2069b3 now -- I think I figured-out one little thing (Re: ANN: SSL Support))
Date: Sat, 12 Nov 2011 11:53:08 +0100
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20111108 Thunderbird/8.0

Am 11.11.2011 23:17, schrieb SciFi:

I guess the thing to remember is something like this:
Us mere mortals wouldn't normally need to worry about
matching these things together properly.  We would
expect things to "just work" by the code doing
whatever "magic" is required.   ;)
That's right ;)
Can I make a mac-users joke now? I better not, lol.

For us geeks trying to iron-out this present anomaly,
I still cannot find what the "proper name" should be
for the gn and gmane certs/pems.
That's easy, the same hostname you gave as a hostname
in pan. I build an internal map. But as I said earlier, you're right
here, I'll make that dynamic with a file-based map. So even if
you wanted to change the certificate by hand, you could do
that with just changing the appropiate key in preferences.xml.

However, I suppose discovering the aw name was
more of an "accident" it seems to work that way.  ;)

I then suppose the OpenSSL APIs will have something
to offer for the app to keep-track of these certs?
(Other software, that support SSL, seem to handle
  all this tracking automatically.  The app only
  needs to know whether to use SSL-mode or not.)

"Other" OpenSSL APIs? I guess they just check the hostname
for a match. For example

reply via email to

[Prev in Thread] Current Thread [Next in Thread]