I could use that to set a flag in my code if the callback
took a context parameter so that I could get an idea of which
connection the callback was for. If I understand what I saw,
I won't be able to tell which connection needs the cert.

        Thanks for the information!

> -----Original Message-----
> From: Lutz Jaenicke [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 06, 2002 2:58 AM
> To: [EMAIL PROTECTED]
> Subject: Re: How does a client tell if a server is requesting a client
> cert?
> 
> 
> On Tue, Feb 05, 2002 at 09:46:45AM -0500, Glenn Horton wrote:
> > 
> >     My application runs on Unix and Windows. I'm using 
> OpenSSL on Unix and Microsoft's
> > Schannel SSL implementation on Windows. 
> > 
> >     On Windows, I can tell that a server is doing client 
> authentication and has requested 
> > a client certificate. Can I detect this using OpenSSL? If so, how?
> 
> The handshake is handled transparently inside the OpenSSL 
> library. There is
> no API to find out whether the certificate was requested or not.
> However: there exists the SSL_CTX_set_client_cert_cb() function call,
> which allows to specify a callback to be called on the client, once it
> has to supply the certificate. It is not yet documented, as I did not
> have a good idea on how to deal with certificate chains and the
> intermediate certificates...
> 
> Best regards,
>       Lutz
> -- 
> Lutz Jaenicke                             
> [EMAIL PROTECTED]
> http://www.aet.TU-Cottbus.DE/personen/jaenicke/
> BTU Cottbus, Allgemeine Elektrotechnik
> Universitaetsplatz 3-4, D-03044 Cottbus
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
> 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to