Re: Detecting in an SSL client that the server asked for a client certificate

2013-11-24 Thread Nabla C0d3
Great answer, thanks! On Sat, Nov 23, 2013 at 4:54 PM, Dr. Stephen Henson wrote: > On Sat, Nov 23, 2013, Nabla C0d3 wrote: > > > Hi, > > > > I would like my SSL client to be able to detect when the server it's > > connecting to requested a client cert. If th

Detecting in an SSL client that the server asked for a client certificate

2013-11-23 Thread Nabla C0d3
Hi, I would like my SSL client to be able to detect when the server it's connecting to requested a client cert. If the client doesn't provide a cert, the SSL handshake fails with "SSL alert number 40". However, AFAIK this error could be triggered by other problems with the handshake, so I can't us

New SSL scanner based on OpenSSL+ Python + ctypes

2011-11-02 Thread Nabla C0d3
Hi there, We just released an SSL scanner we've been working on for a while. It's written in Python and based on OpenSSL. Long story short, in order to scan for "newer" issues (like insecure renegotiation), I needed access to OpenSSL APIs that aren't exposed by M2Crypto or PyOpenSSL and direct ac