httpd-test-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joe Orton <jor...@redhat.com>
Subject Re: svn commit: r290157 - /httpd/test/trunk/perl-framework/c-modules/test_ssl/mod_test_ssl.c
Date Tue, 20 Sep 2005 09:13:24 GMT
On Mon, Sep 19, 2005 at 01:39:22PM -0400, Geoffrey Young wrote:
> 
> > +#ifdef HAVE_SSL_EXT_LOOKUP
> >      if (!ext_lookup) {
> >          ap_rputs("ssl_ext_lookup not available", r);
> >          return OK;
> >      }
> 
> hey, speaking of this ext_lookup, can you give me an example of what this
> function does?  in Apache::SSLLookup I've added perl glue for this method,
> and right now I've got 2 forms:
> 
>   my $client_foo = $r->ext_lookup($something, 1);
>   my $server_foo = $r->ext_lookup($something);
> 
> but I really could never figure out what to glean from the generated ssl
> certificates to test against, what to pass as $something, etc.

"$something" should be the OID (unique identifier) of the extension 
which you wish to look up.

The ssl_ext_lookup function has just been replaced with ssl_ext_list so 
you'd probably want to support the latter.  ssl_ext_list returns an 
array of all extensions with that 

All the certificates which are automatically generated in Apache-Test 
have an "nsComment" extension, which has OID "2.16.840.1.113730.1.13", 
set to "This Is A Comment", that's what I used for the t/ssl/extlookup.t 
test.

So with 2.1.7 $r->ext_lookup("2.16.840.1.113730.1.13") should return 
"This Is A Comment" for any SSL vhost in the test suite if it works 
properly.

joe

Mime
View raw message