unofficial mirror of bug-gnu-emacs@gnu.org 
 help / color / mirror / code / Atom feed
* bug#35787: 26.2; gnutls: accessing raw server certificate data
@ 2019-05-18  1:48 Julian Scheid
  2019-07-09  2:42 ` Lars Ingebrigtsen
  0 siblings, 1 reply; 6+ messages in thread
From: Julian Scheid @ 2019-05-18  1:48 UTC (permalink / raw)
  To: 35787

[-- Attachment #1: Type: text/plain, Size: 728 bytes --]

Hello, I would like to request a feature: accessing the raw certificate
of a server connected to via `gnutls-negotiate' (or such).

Currently, `gnutls-peer-status' only allows accessing high-level
information extracted from the certificate, such as the issuer, but not
the certificate data itself.

Access to the raw certificate data would allow implementing the
`tls-server-endpoint' channel binding type as per
https://tools.ietf.org/html/rfc5929#section-4.1 , which requires
> [t]he hash of the TLS server's certificate [RFC5280] as it
> appears, octet for octet, in the server's Certificate message.  Note
> that the Certificate message contains a certificate_list, in which
> the first element is the server's certificate.

[-- Attachment #2: Type: text/html, Size: 1076 bytes --]

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2019-09-24  7:36 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2019-05-18  1:48 bug#35787: 26.2; gnutls: accessing raw server certificate data Julian Scheid
2019-07-09  2:42 ` Lars Ingebrigtsen
2019-07-09  4:20   ` Julian Scheid
2019-07-09 13:44     ` Lars Ingebrigtsen
2019-09-24  5:44       ` Lars Ingebrigtsen
2019-09-24  7:36         ` Julian Scheid

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).