On Mon, May 5, 2008 at 7:04 PM, Milinda Pathirage
<[EMAIL PROTECTED]> wrote:

> +1 for the patch if there is a such kind of problem. AFAIK all the
>  certificates in Rampart/C samples have these delimiters. But we never
>  encountered a such problem. Are you talking about loading certificates from
>  buffer or any other special scenario. It's better if you can point out the
>  scenario where this problem occurs.

Yes.  Loading certificates from the buffer.

The problem is when this is bound to scripting languages, from the
scripting language you only have to read the file contents and give it
to Rampart.  Otherwise (like in the case now) you have to remember to
remove those delimiters and then pass it to Rampart.  If you look at
WSF/PHP they've written two functions to do this.  Namely
ws_get_key_from_file and ws_get_cert_from_file.

IMHO, it makes things simpler to just read whatever on the file and
pass it to Rampart.  Although it's just a matter of calling
s/str/replace/ in Perl, to me a function at Rampart layer seems like a
far more logical place.

Also this lead to an interesting debugging session to pinpoint what
was going wrong :-)

Bye,

    -Chintana

-- 
http://engwar.com/

Reply via email to