diff options
| author | cinap_lenrek <cinap_lenrek@gmx.de> | 2012-11-15 19:32:53 +0100 |
|---|---|---|
| committer | cinap_lenrek <cinap_lenrek@gmx.de> | 2012-11-15 19:32:53 +0100 |
| commit | b28f60cdd3d7efcb5699cb8360e1e50823238d1f (patch) | |
| tree | 115da668115f4f10533358e3ad1b92dbe053b3a9 /sys/man/8 | |
| parent | df829e6c07ddc515fa6c00e4baa888dfaecbd26d (diff) | |
add C-Keens tls-client-auth
This patch adds client TLS authentication to libsec in compliance with
rfc 4346.
A new -c flag has been introduced for tlsclient allowing the user to
specify a certificate in pem(8) format which will be provided to the
server upon request.
A -D debug flag has been introduced to enable debugging output.
The patch has been tested against OpenSSL 0.9.7j 04 May 2006.
It exists today because of the great (debugging) help and insight
provided by Matthias Bauer.
TODOs:
- specification of a certain client key in factotum is not possible at
the moment
- tlssrv should support this too
These will get added in another patch.
The first try to submit this patch failed due to a network error.
Sorry for the duplication!
Kind regards,
Christian
Diffstat (limited to 'sys/man/8')
| -rw-r--r-- | sys/man/8/tlssrv | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/sys/man/8/tlssrv b/sys/man/8/tlssrv index bbc74d3c8..e813f150c 100644 --- a/sys/man/8/tlssrv +++ b/sys/man/8/tlssrv @@ -24,6 +24,13 @@ logfile .PP .B tlsclient [ +.B -D +] +[ +.B -c +.I cert.pem +] +[ .B -t .I trustedkeys ] @@ -69,6 +76,14 @@ starts TLS, and then relays between the network connection and standard input and output. +The +.B -D +flag enables some debug output. +Specifying a certificate in pem(8) format with the +.B -c +flag, causes the client to submit this certificate upon +server's request. A corresponding key has to be present in +.IR factotum(4). If the .B -t flag |