Re: [Pan-devel] at b2069b3 now -- I think I figured-out one little thing (Re: ANN: SSL Support))

[Heinrich Mueller]

Am 11.11.2011 23:17, schrieb SciFi:
> Ah.
> So.
> I guess the thing to remember is something like this:
> Us mere mortals wouldn't normally need to worry about
> matching these things together properly.  We would
> expect things to "just work" by the code doing
> whatever "magic" is required.   ;)
That's right ;)
Can I make a mac-users joke now? I better not, lol.
> For us geeks trying to iron-out this present anomaly,
> I still cannot find what the "proper name" should be
> for the gn and gmane certs/pems.
That's easy, the same hostname you gave as a hostname
in pan. I build an internal map. But as I said earlier, you're right
here, I'll make that dynamic with a file-based map. So even if
you wanted to change the certificate by hand, you could do
that with just changing the appropiate key in preferences.xml.
> However, I suppose discovering the aw name was
> more of an "accident" it seems to work that way.  ;)
>
> I then suppose the OpenSSL APIs will have something
> to offer for the app to keep-track of these certs?
> (Other software, that support SSL, seem to handle
>   all this tracking automatically.  The app only
>   needs to know whether to use SSL-mode or not.)
"Other" OpenSSL APIs? I guess they just check the hostname
for a match. For example http://www.jbinup.com/.