Albert Siersema wrote:
In pkcs11.c instead of
if (!strcmp (szId, szSubject))
could strstr() to match on substring in the subject ?
(akin cryptoapicert "SUBJ:...")
This would be easier in distributing config files to clients.
Hello,
I don't like fuzzy matching, this is why I provide the
subject name in the show-pkcs11-objects.
Fuzzy matching causes many problems... What happens if more
than one certificate matches? Should I select the first? the
last? the best?
What if the wrong certificate matches? And the user
accidentally perform private key operation with the wrong key?
Best Regards,
Alon Bar-Lev.
