krime / serf

Automatically exported from code.google.com/p/serf
Apache License 2.0
1 stars 0 forks source link

provide a hook for (pkcs11) cryptography modules to use ssl client certificates #8

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
it would be nice if serf would provide a hook to configure cryptography 
modules for reading ssl client certificates of smartcards, the same as web 
browsers do.

e.g. in mozilla firefox there is such a possibility in preferences - 
advanced - cryptography modules. e.g. in windows you may add a pkcs11 dll 
that way which then shows up when you list your certificates.

Original issue reported on code.google.com by rupert.t...@gmail.com on 30 Nov 2006 at 12:41

GoogleCodeExporter commented 9 years ago
Can you elaborate on this more?  I'm not quite sure what you mean.

Thanks!

Original comment by justin.e...@gmail.com on 16 Dec 2006 at 4:37

GoogleCodeExporter commented 9 years ago
when loggin in to sites the web server can be configured to request x509 ssl 
client
certificates to authenticate a user.

these certificates may be stored in a file, or on a smartcard (= keystore). to 
use
the certificates stored in the smartcard often pkcs11 interface is used.

a svn client also is a ssl client, and therefor it would be nice to use the same
infrastructure as well. steve king, one of the authors of tortoisesvn suggested 
the
best place to add this feature would be serf, as it then automatically becomes
available to all svn clients.

Original comment by rupert.t...@gmail.com on 22 Dec 2006 at 8:54

GoogleCodeExporter commented 9 years ago
This should now be mostly supported in r1100.

Subversion r24025 and Serf r1100 can now handle SSL client certificates.

Original comment by justin.e...@gmail.com on 22 Mar 2007 at 8:23

GoogleCodeExporter commented 9 years ago
is it correct that this is pkcs12, not pkcs11 like the original requirement of 
the
ticket was? could you pls reopen if this is true?

reference: http://www.mozilla.org/projects/security/pki/pkcs11/netscape/

Original comment by rupert.t...@gmail.com on 13 Jun 2007 at 6:08