On Mon, Sep 19, 2005 at 01:39:22PM -0400, Geoffrey Young wrote:
+#ifdef HAVE_SSL_EXT_LOOKUP
if (!ext_lookup) {
ap_rputs(ssl_ext_lookup not available, r);
return OK;
}
hey, speaking of this ext_lookup, can you give me an example of what this
function does? in Apache::SSLLookup I've added perl glue for this method,
and right now I've got 2 forms:
my $client_foo = $r-ext_lookup($something, 1);
my $server_foo = $r-ext_lookup($something);
but I really could never figure out what to glean from the generated ssl
certificates to test against, what to pass as $something, etc.
$something should be the OID (unique identifier) of the extension
which you wish to look up.
The ssl_ext_lookup function has just been replaced with ssl_ext_list so
you'd probably want to support the latter. ssl_ext_list returns an
array of all extensions with that
All the certificates which are automatically generated in Apache-Test
have an nsComment extension, which has OID 2.16.840.1.113730.1.13,
set to This Is A Comment, that's what I used for the t/ssl/extlookup.t
test.
So with 2.1.7 $r-ext_lookup(2.16.840.1.113730.1.13) should return
This Is A Comment for any SSL vhost in the test suite if it works
properly.
joe
