TOG-Pegasus client library and X509 verification

Peter Hatina phatina at redhat.com
Thu Jan 16 09:31:07 UTC 2014


Hi,

when using TOG-Pegasus client library and trying to connect to cimserver
via SSL, I came across this issue:

TOG-Pegasus does *not* verify server's certificate in terms of matching
subject's Common Name, subject's Alternative Names (if x509v3 used). To
be able to properly verify, who we are talking to, I made some changes
to mentioned client's library [1]:

1. user is able to pass his own data via void-pointer
2. user is able to get Subject's Common Name in verification callback
3. user is able to get Subject's Alternative Names (if x509v3 used)

For a simple example, see [1].

I could not find reasonable way, how to implement a default verification
callback in the library (as pywbem does).

Feel free to comment.

[1] http://bugzilla.openpegasus.org/show_bug.cgi?id=9848

-- 
Peter Hatina
ENG Server Experience, System Management
Red Hat Czech, Brno


More information about the openlmi-devel mailing list