Re: TLS and client certificates

2001-03-16 Thread Cyrus Daboo
--On Friday, March 16, 2001 10:41 AM +0100 Norbert Klasen <[EMAIL PROTECTED]> wrote: >> Excellent catch. This looks like a bug; as you might've guessed, we >> don't yet use client side authentication with STARTTLS, and this code >> was only tested a few times when it was first inserted. > > BTW

Re: TLS and client certificates

2001-03-16 Thread Norbert Klasen
Lawrence Greenfield wrote: > Excellent catch. This looks like a bug; as you might've guessed, we > don't yet use client side authentication with STARTTLS, and this code > was only tested a few times when it was first inserted. BTW are there any MUAs that support STARTTLS/IMAPS with client certif

Re: TLS and client certificates

2001-03-15 Thread Lawrence Greenfield
Excellent catch. This looks like a bug; as you might've guessed, we don't yet use client side authentication with STARTTLS, and this code was only tested a few times when it was first inserted. I'll apply the patch you suggest. The dn mapping is an open problem across multiple protocols and aut

TLS and client certificates

2001-03-15 Thread Norbert Klasen
Hi, if imtest is called with a client certificate (and the local ca cert has been specified with tls_ca_file in /etc/imapd.conf) the imapd_userid variable is set cmd_starttls() to external.auth_id, which is set in tls_start_servertls to the CN part of the subject in the client cert. >From the log