Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of jorton@redhat.com designates
 66.187.237.31 as permitted sender)
Date: Thu, 2 Jul 2009 12:48:04 +0100
From: Joe Orton <jorton@redhat.com>
To: dev@httpd.apache.org
Subject: Re: mod_ssl / ssl_engine_ocsp.c customizations
Message-ID: <20090702114804.GA5033@redhat.com>
Mail-Followup-To: dev@httpd.apache.org
References: 
 <E1EB39574EB96B45833BF0B6BE1137241DF2AADDD4@vm-w2k3s04.intranet.michael-wessel.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: 
 <E1EB39574EB96B45833BF0B6BE1137241DF2AADDD4@vm-w2k3s04.intranet.michael-wessel.de>
User-Agent: Mutt/1.5.18 (2008-05-17)
Organization: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor,
 Berkshire, SL4 1TE, United Kingdom.
  Registered in UK and Wales under Company Registration No. 03798903
  Directors: Michael Cunningham (USA), Brendan Lane (Ireland),
 Matt Parson (USA), Charlie Peters (USA)

On Fri, Jun 26, 2009 at 03:55:27PM +0200, Natanael Mignon - michael-wessel.de wrote:
> I am currently working on - dirty, please have mercy - customizations 
> of mod_ssl and especially OCSP-handling for a specific project (on 
> basis of Apache 2.3 code). As I am neither a seasoned C-coder nor 
> familiar with OpenSSL libraries, I am having problems extracting the 
> issuer name from an X.509 cert into a usable string format.
> 
> What I need to do:
> 
> 
> ·         Write my own "static const char *extract_responder_uri()"
> 
> ·         Don't read responder uri from certificate, but from a file

This could be done by making mod_ssl run an optional external hook to 
retrieve a responder URI given a certificate.  I will try to find time 
to add such a hook, or patches are welcome ;)

> how to get a char* or some string from an X509_NAME?

This kind of question is better off asked in openssl-users@openssl.org - 
you can see lots of examples of how to do it in mod_ssl's 
ssl_engine_vars.c however.

Regards, Joe