Re: mod_ssl / ssl_engine_ocsp.c customizations

[Joe Orton]

On Fri, Jun 26, 2009 at 03:55:27PM +0200, Natanael Mignon - michael-wessel.de 
wrote:
 I am currently working on - dirty, please have mercy - customizations 
 of mod_ssl and especially OCSP-handling for a specific project (on 
 basis of Apache 2.3 code). As I am neither a seasoned C-coder nor 
 familiar with OpenSSL libraries, I am having problems extracting the 
 issuer name from an X.509 cert into a usable string format.
 
 What I need to do:
 
 
 · Write my own static const char *extract_responder_uri()
 
 · Don't read responder uri from certificate, but from a file

This could be done by making mod_ssl run an optional external hook to 
retrieve a responder URI given a certificate.  I will try to find time 
to add such a hook, or patches are welcome ;)

 how to get a char* or some string from an X509_NAME?

This kind of question is better off asked in openssl-us...@openssl.org - 
you can see lots of examples of how to do it in mod_ssl's 
ssl_engine_vars.c however.

Regards, Joe

mod_ssl / ssl_engine_ocsp.c customizations

[Natanael Mignon - michael-wessel . de]

Dear list,

as I am new to this list, I don't know but hope questions regarding mod_ssl are 
welcome?

I am currently working on - dirty, please have mercy - customizations of 
mod_ssl and especially OCSP-handling for a specific project (on basis of Apache 
2.3 code). As I am neither a seasoned C-coder nor familiar with OpenSSL 
libraries, I am having problems extracting the issuer name from an X.509 cert 
into a usable string format.

What I need to do:


· Write my own static const char *extract_responder_uri()

· Don't read responder uri from certificate, but from a file

· (Responder uri is connected with the issuer of the certificate in 
some other place - extracted and saved to file by other means...)

· File's name is equal to the issuer's DN - to my mind the most direct 
way to look it up

· So, I have to get the issuer name from the cert and build a filename 
to fopen(). That's the point where I am stuck because of type problems (how to 
get a char* or some string from an X509_NAME?)...

If this inquiry is off-topic, please give me a hint to where I could ask for 
help, or drop me a line, if more detail is required.

Any help is highly appreciated, thanks in advance!

Mit freundlichen Grüßen / Kind regards
 Natanael Mignon

IT-Dienstleistungen: beraten | planen | umsetzen | betreiben
__
michael-wessel.de  Informationstechnologie GmbH
Krausenstraße 50
30171 Hannover
Germany
fon  (+49) 511 260 911-0 (DW: - 13)
fax  (+49) 511 318 039-9
eMail  n...@michael-wessel.demailto:n...@michael-wessel.de
webwww.michael-wessel.dehttp://www.michael-wessel.de/
Bitte senden Sie wichtige E-Mails stets auch an 
serv...@michael-wessel.demailto:serv...@michael-wessel.de, um 
sicherzustellen, dass diese zeitnah bearbeitet werden.

Geschäftsführer: Michael Wessel Dipl. Phys.
Amtsgericht Hannover
HR B 59031