Re: X509 login patches

2009-12-15 Thread Christos Triantafyllidis
Hi Tuju, no this patch doesn't cover this case. I guess this won't be that difficult to be implemented if it is supported by pyOpenSSL the SSL part is done there. Unfortunately my country doesn't use any PKI card but i'm also interested in using my eToken for this. Regards, Christ

Re: X509 login patches

2009-12-15 Thread Juha Tuomala
On Mon, 14 Dec 2009, Christos Triantafyllidis wrote: i'm using koji since a few week and i needed X509 authentication. This is interesting. Any idea, would client side pkcs11.so module sertificates work out of the box then? In my understading, the part how the certificate gets into http co

Re: X509 login patches

2009-12-14 Thread Christos Triantafyllidis
Hi again, On Dec 14, 2009, at 10:52 PM, Christos Triantafyllidis wrote: Hi Mike, first of all i need to clarify that i'm not koji expert (as i said i'm using it only a few weeks). On Dec 14, 2009, at 9:42 PM, Mike Bonnet wrote: koji-hub already supports a DNUsernameComponent option.

Re: X509 login patches

2009-12-14 Thread Christos Triantafyllidis
Hi Mike, first of all i need to clarify that i'm not koji expert (as i said i'm using it only a few weeks). On Dec 14, 2009, at 9:42 PM, Mike Bonnet wrote: koji-hub already supports a DNUsernameComponent option. Rather than introduce a new config option, I think I'd rather see "DNUserna

Re: X509 login patches

2009-12-14 Thread Christos Triantafyllidis
On 14 Δεκ 2009, at 9:32 μ.μ., Steve Traylen wrote: What did you do about the email address? It normally uses c...@configured.org Well it normally uses usern...@domain where in my case it already invalid. I'm planning to extend the users table to include also email. So now it is d...@

Re: X509 login patches

2009-12-14 Thread Mike Bonnet
On 12/14/2009 02:03 PM, Christos Triantafyllidis wrote: > Hi all and welcome me to the list :), Welcome, and thanks for the patches! Comments in-line. > i'm using koji since a few week and i needed X509 authentication. > Unfortunately current support for x509 was limited to: > a) Use of the

Re: X509 login patches

2009-12-14 Thread Steve Traylen
On Mon, Dec 14, 2009 at 8:03 PM, Christos Triantafyllidis wrote: > Hi all and welcome me to the list :), > >    i'm using koji since a few week and i needed X509 authentication. > Unfortunately current support for x509 was limited to: > a) Use of the CN part only from the subject DN as the usernam

X509 login patches

2009-12-14 Thread Christos Triantafyllidis
Hi all and welcome me to the list :), i'm using koji since a few week and i needed X509 authentication. Unfortunately current support for x509 was limited to: a) Use of the CN part only from the subject DN as the username Although traditionally CN can be the "username" of the user there