Re: New user - comments (and patches) to 0.4.6-15

Hi Colin,

> Date: Thu, 10 Jun 2004 20:10:11 +0200
> From: Colin Leroy <colin-5s/l0yV9g/[email protected]>
> To: Stephan Dahl <sdahl-yrwVVJnAJyJ/[email protected]>
> Cc: [email protected]
> Subject: Re: [Ayttm-users] New user - comments (and patches) to 0.4.6-15
> Organization: 
> 
> On 10 Jun 2004 at 19h06, Stephan Dahl wrote:
> 
> Hi, 
> 
> 
>>-	if
>>(X509_NAME_get_text_by_NID(X509_get_issuer_name(cert->x509_cert), 
>>+	if (X509_NAME_get_text_by_NID(X509_get_issuer_name(cert), 
>> 				       NID_commonName, buf, 100) >= 0)
>> 		issuer_commonname = g_strdup(buf);
> 
> 
> What's that? 

It's part of a patch to allow more than one SSL certificate per server.

 From my changelog:

...
2. Added support for multiple SSL certificates per server

The messenger.hotmail.com server kept switching SSL certificate on me -
I suspect that it is really two servers behind a load balancer.

I changed the implementation of the SSL certificate store (in
$HOME/.ayttm/certs) to support any number of stored certificates
for a specified server/port combination. If any of the certs match,
the connection is quietly accepted. Of course, all certs must be
explicitly approved by the user.

Also added a popup warning when a new, signed certificate is presented,
noting that the signature is valid - before, any signed certificate was
quietly accepted.
...

I thought I already sent you this answer directly?


Regards,
-- 
Stephan (sdahl-yrwVVJnAJyJ/[email protected])
"Given the choice between accomplishing something and just lying
around, I'd rather lie around.  No contest."
		-- Eric Clapton