Re: Client certificate authentication in HTTPS

Gerd Stolpmann <[email protected]> Fri, 26 Aug 2011 18:24:32 +0200
Newsgroups gmane.comp.lang.ocaml.lib.net.devel
Message-ID <1314375872.3496.67.camel@thinkpad>
Am Freitag, den 26.08.2011, 15:11 +0100 schrieb Theodore Hong:
> Hi, I'm glad to see that ocamlnet now supports HTTPS.  Is it possible
> to use client certificates with Https_client?  I could only find
> documentation for connections without user certificates.

This is possible. The trick is to configure the SSL context accordingly.
For example, to add a client certificate to ctx use

Ssl.use_certificate ctx "certificate.pem" "certificate.key"

where the latter two arguments are file names. There are a few more
functions for client certificates in the Ssl module, see there for docs.

Gerd


> 
> Thanks,
> Theo
> 
> ------------------------------------------------------------------------------
> EMC VNX: the world's simplest storage, starting under $10K
> The only unified storage solution that offers unified management 
> Up to 160% more powerful than alternatives and 25% more efficient. 
> Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev
> _______________________________________________
> Ocamlnet-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/ocamlnet-devel
> 

-- 
------------------------------------------------------------
Gerd Stolpmann, Darmstadt, Germany    [email protected]
Creator of GODI and camlcity.org.
Contact details:        http://www.camlcity.org/contact.html
Company homepage:       http://www.gerd-stolpmann.de
*** Searching for new projects! Need consulting for system
*** programming in Ocaml? Gerd Stolpmann can help you.
------------------------------------------------------------


------------------------------------------------------------------------------
EMC VNX: the world's simplest storage, starting under $10K
The only unified storage solution that offers unified management 
Up to 160% more powerful than alternatives and 25% more efficient. 
Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev