Bug #54593 for Net-SSLeay: Patch to add access to peer certificate fingerprints

Sat Feb 13 12:57:47 2010 franck.mail [...] dthconnex.com.com - Ticket created

Subject:	Patch to add access to peer certificate fingerprints
Date:	Sat, 13 Feb 2010 18:56:33 +0100
To:	bug-Net-SSLeay [...] rt.cpan.org
From:	Franck Joncourt <franck.mail [...] dthconnex.com.com>

Hi, I am just forwarding a whishlist bug from the Debian BTS. ---> Here is a small patch to add the possibility for a Perl script to check the peer certificate fingerprints e.g. in a similar way fetchmail does. This adds the capability to strongly authenticate the peer when using Net::SSLeay <--- The main entry for the bug report can be seen at the following address: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414941 I have enclosed the patch anyway. Regards, -- Franck Joncourt

Message body is not shown because sender requested not to inline it.

Download signature.asc
application/pgp-signature 198b

Message body not shown because it is not plain text.

Sat Feb 13 20:46:02 2010 MIKEM [...] cpan.org - Correspondence added 30 min

Thanks, this patch has been applied with a minor change: the original patch used stricmp, which is not available in all perls (eg OpenSUsE 5.10.0). Changed to use strcmp instead, which makes signature type required to be lowercase. Also add a test case to 07_sslecho.t SVN has been updated. Cheers.

Sat Feb 13 20:46:07 2010 The RT System itself - Status changed from 'new' to 'open'

Sat Feb 13 20:46:07 2010 MIKEM [...] cpan.org - Status changed from 'open' to 'resolved'

Sat Feb 13 20:46:10 2010 MIKEM [...] cpan.org - Given to MIKEM