Hi, This might be a red herring, but are you sure that your server requires
a client cert?
As far as I can understand the
RFC https://tools.ietf.org/html/rfc5246#section-7.4.4, it is the server
that sends a certificate request to the client so it can authenticate.
W dniu poniedziałek, 19 lutego 2018 08:46:13 UTC użytkownik Miha Zoubek
napisał:
>
> Hello
>
> tnx for help.
>
> I tried like:
>
> tlsConfig := &tls.Config{
> Certificates: []tls.Certificate{cert},
> RootCAs: caCertPool,
> InsecureSkipVerify: false,
> }
>
> //tlsConfig.BuildNameToCertificate()
> transport := &http.Transport{TLSClientConfig: tlsConfig}
> client := &http.Client{Transport: transport}
>
> but it is the same thing. What about GetClientCertificate() config, how to
> use, should this help?
> // GetClientCertificate, if not nil, is called when a server requests a
> // certificate from a client. If set, the contents of Certificates will
> // be ignored.
>
>
>
> V V pon., 19. feb. 2018 ob 09:33 je oseba Jakob Borg <ja...@kastelo.net
> <javascript:>> napisala:
>
>> Try without using Config.BuildNameToCertificate. That’s a server side
>> thing and I doubt it does what you want on the client side.
>>
>> //jb
>>
>> On 16 Feb 2018, at 14:41, mzo...@gmail.com <javascript:> wrote:
>>
>> Hello
>>
>> this is my code:
>> https://play.golang.org/p/yxhYXEVMPjB
>>
>>
>> I got certificate in pfx format, I extraced client, CA, private
>> certificate which i imported in my program.
>> # Extract Public Key (ask for password)
>> openssl pkcs12 -in file.pfx -out file_public.pem -clcerts -nokeys
>>
>> # Extract Certificate Authority Key (ask for password)
>> openssl pkcs12 -in file.pfx -out file_ca.pem -cacerts -nokeys
>>
>> # Extract Private Key (ask for password)
>> openssl pkcs12 -in file.pfx -out file_private.pem -nocerts -nodes
>>
>>
>> I need to send certificate in request to server but the thing is that i
>> get from server that certificate is not included in request. I did trace
>> also with WireShark and there is no certificate appanded in request.
>>
>>
>> Thank you for all your help!
>> miha
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "golang-nuts" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to golang-nuts...@googlegroups.com <javascript:>.
>> For more options, visit https://groups.google.com/d/optout.
>>
>>
--
You received this message because you are subscribed to the Google Groups
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
