TLS feature when migrating from OCamlnet 3.x to 4.x

--===============1634588919527025853==
Content-Type: multipart/alternative; boundary=001a113eeaf47f6c3305255b3ac6

--001a113eeaf47f6c3305255b3ac6
Content-Type: text/plain; charset=UTF-8

Hi,

Our project, Caml Crush, a PKCS#11 proxy in OCaml uses OCamlnet Netplex and
RPC layer.

We have been migrating from OCamlnet 3.x to OCamlnet 4.x during the last
months and we had some questions regarding the newly released TLS bindings.

In our code compatible with Ocamlnet 3.x SSL bindings (through OCaml-ssl),
we are using the Ssl.get_certificate OCaml-ssl call in the
'get_peer_user_name' server hook to get and dump the peer client
certificate (this allows us to check this certificate against a white list
on the server side).

We would like to have the same degree of control with the 4.x release of
OCamlnet.

After some digging in OCamlnet 4.x TLS code, we have not found an API
providing the Ssl.get_certificate service. Did we miss something? Is it
possible to emulate such a feature?

Also, the current implementation does not allow to have a separate trust
chain (one for the server and one for the clients when peer_auth is
enabled). This would be a welcome addition.

Thanks in advance for your help,

Thomas

--001a113eeaf47f6c3305255b3ac6
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><span style=3D"font-size:12.8px">Hi,</span><div style=3D"f=
ont-size:12.8px"><br></div><div style=3D"font-size:12.8px">Our project, Cam=
l Crush, a PKCS#11 proxy in OCaml uses OCamlnet Netplex and RPC layer.</div=
><div style=3D"font-size:12.8px"><br></div><div style=3D"font-size:12.8px">=
We have been migrating from OCamlnet 3.x to OCamlnet 4.x during the last mo=
nths and we had some questions regarding the newly released TLS bindings.</=
div><div style=3D"font-size:12.8px"><br></div><div style=3D"font-size:12.8p=
x">In our code compatible with Ocamlnet 3.x SSL bindings (through OCaml-ssl=
), we are using the=C2=A0Ssl.get_certificate OCaml-ssl call in the &#39;get=
_peer_user_name&#39; server hook to get and dump the peer client certificat=
e (this allows us to check this certificate against a white list on the ser=
ver side).</div><div style=3D"font-size:12.8px"><br></div><div style=3D"fon=
t-size:12.8px">We would like to have the same degree of control with the 4.=
x release of OCamlnet.</div><div style=3D"font-size:12.8px"><br></div><div =
style=3D"font-size:12.8px">After some digging in OCamlnet 4.x TLS code, we =
have not found an API providing the Ssl.get_certificate service. Did we mis=
s something? Is it possible to emulate such a feature?</div><div style=3D"f=
ont-size:12.8px"><br></div><div style=3D"font-size:12.8px">Also, the curren=
t implementation does not allow to have a separate trust chain (one for the=
 server and one for the clients when peer_auth is enabled). This would be a=
 welcome addition.</div><div style=3D"font-size:12.8px"><br></div><div styl=
e=3D"font-size:12.8px">Thanks in advance for your help,</div><div style=3D"=
font-size:12.8px"><br></div><div style=3D"font-size:12.8px">Thomas</div></d=
iv>

--001a113eeaf47f6c3305255b3ac6--


--===============1634588919527025853==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741551&iu=/4140
--===============1634588919527025853==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ocamlnet-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ocamlnet-devel

--===============1634588919527025853==--