Rich Salz
rsalz at caveosystems.com
Fri Aug 18 09:34:02 EST 2000
> BTW, one way to get DN is "SSLOptions +FakeBasicAuth", then the DN should > appear in req.connection.user. Right. But I need more than that. I need to know *if* there's a client cert, all the nitty-gritty details of it (e.g., what the keyUsage extension is), I need to do my own verification, no CRL processing, my own chain verification, etc. Lots of stuff. Ralph did a great job writing a turn-key application that is great for most folks, but I need to really get under the hood....
|