[sr-dev] TLS inspection for authentication

Iñaki Baz Castillo ibc at aliax.net
Wed May 25 16:34:46 CEST 2011


2011/5/25 Jan Janak <jan at ryngle.com>:
> One list is here:
> http://sip-router.org/wiki/cookbooks/selects/devel

Thanks Jan. Let me one question more:

RFC 5280 states that when receiving a TLS certificate, each value of
subjectAltName must be inspected and just taken in case its Type is
"URI" or "DNS":

  http://tools.ietf.org/html/rfc5922#section-7.1

I'm not sure whether I can retrieve *all* (various) subjectAltName in
the certificate (given the list of selects in your provided link). Is
it possible? If so, how could I check its Type?

Thanks a lot.


-- 
Iñaki Baz Castillo
<ibc at aliax.net>



More information about the sr-dev mailing list