Re: Help with certificates

Thanks for the reply.

The jid in the cert is expected to be just the node name?  Or does it
require to be a bare jid?

Regards,
Vinod.

On 3/24/06, Peter Millard <me-STcBuFROdrv2eFz/[email protected]> wrote:
> I've done my testing with .PEM certificates which is normally what
> openssl gives you. Note that you'll need to use the latest build of
> Exodus in order for the SASL EXTERNAL stuff to work. Obviously, your
> server needs to send it back as a possible mechanism as well :) Make
> sure the cert you use has an XMPP jid encoded per RFC 3920, otherwise,
> the server needs a way to somehow map a client cert to a client jid. If
> this is the case, exodus should do the right thing when it gets back the
> <jid> element after we do resource binding.
>
> Eventually, we may be sucking certs from the built-in windows cert
> store, but right now the .PEM stuff was easiest to do with the existing
> SSL libs we are using.
>
> pgm.
>
> Vinod Panicker wrote:
> > Hi,
> >
> > I'm trying to get exodus to login to my server using SASL EXTERNAL.
> > What format does the certificate need to be in?
> >
> > Anything else that I have to keep in mind?