Change in vdsm[master]: Check certificate purpose in vdsClient

Federico Simoncelli fsimonce at redhat.com
Fri Aug 26 15:52:59 UTC 2011


Federico Simoncelli has posted comments on this change.

Change subject: Check certificate purpose in vdsClient
......................................................................


Patch Set 1:

Since there are several libraries that might provide this service could you suggest one that is not deprecated?
I looked at OpenSSL and it's not providing this check out of the box so I'd need to implement it somehow. Is this a preferable solution?
The motivation for this check (that I will include in the commit message) is that if RHEVM provides a certificate not suitable for the client (as happened a week ago) we catch the problem and provide a more understandable error message.

--
To view, visit http://gerrit.usersys.redhat.com/851
To unsubscribe, visit http://gerrit.usersys.redhat.com/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I3ad83ee57df1a3b3a52ea47c529ef3e4af57e2fb
Gerrit-PatchSet: 1
Gerrit-Project: vdsm
Gerrit-Branch: master
Gerrit-Owner: Federico Simoncelli <fsimonce at redhat.com>
Gerrit-Reviewer: Dan Kenigsberg <danken at redhat.com>
Gerrit-Reviewer: Federico Simoncelli <fsimonce at redhat.com>
Gerrit-Reviewer: Igor Lvovsky <ilvovsky at redhat.com>
Gerrit-Reviewer: Saggi Mizrahi <smizrahi at redhat.com>


More information about the vdsm-patches mailing list