headers
bs | 1 Apr 2004 02:51

Re: multiple certs

Brantley Coile wrote:
> So, maybe I missed it.  Did anyone have a suggestion
> on how to send a certificate chain in tlssrv?
> 
I don't think it can do certs as you see it.

What you can do is send the fingerprint of your cert,
which it can lookup and authorize.

This is similar to what some telnet clients do:
(a) someone must have had the authorization to the
     fp on the server
(b) you are presenting me with that, so, you are OK

http://www.vandyke.com/products/securecrt/public_key.html
Permalink | Reply | 3 comments |
headers
Brantley Coile | 1 Apr 2004 02:54
Favicon

Re: multiple certs

> Brantley Coile wrote:
>> So, maybe I missed it.  Did anyone have a suggestion
>> on how to send a certificate chain in tlssrv?
>> 
> I don't think it can do certs as you see it.
> 
> What you can do is send the fingerprint of your cert,
> which it can lookup and authorize.

I want to do https without having the browser fuss.
How can figerprints help with that?
Permalink | Reply | 2 comments |
headers
bs | 1 Apr 2004 04:10

Re: multiple certs

Brantley Coile wrote:
>>Brantley Coile wrote:
>>
>>>So, maybe I missed it.  Did anyone have a suggestion
>>>on how to send a certificate chain in tlssrv?
>>>
>>
>>I don't think it can do certs as you see it.
>>
>>What you can do is send the fingerprint of your cert,
>>which it can lookup and authorize.
> 
> 
> I want to do https without having the browser fuss.
> How can figerprints help with that?
> 
I misunderstood: I assumed that you wanted the server
(https) to validate a clients cert. Fingerprints cannot
help you there.
I don't know this https server to tell you how to make it
present the cert chain.
Permalink | Reply | 0 comments |
headers
bs | 1 Apr 2004 04:14

Re: multiple certs

Brantley Coile wrote:
>>Brantley Coile wrote:
>>
>>>So, maybe I missed it.  Did anyone have a suggestion
>>>on how to send a certificate chain in tlssrv?
>>>
>>
>>I don't think it can do certs as you see it.
>>
>>What you can do is send the fingerprint of your cert,
>>which it can lookup and authorize.
> 
> 
> I want to do https without having the browser fuss.
> How can figerprints help with that?
> 
If your browser is like Mozilla/Netscape, you can import
the server cert as a .pem file. So, if you know the cert it
presents, you can make the browser aware of it.
Simplest is to issue a self signed cert and import it
in the browser.
Permalink | Reply | 0 comments |
headers
ron minnich | 1 Apr 2004 05:55

Re: tactic

On Wed, 31 Mar 2004, Micah Stetson wrote:

> My bayesian filter caught it.

Wrong again. Darn. I gotta get me one of these things.

ron
Permalink | Reply | 0 comments |
headers
Nils M Holm | 1 Apr 2004 08:56

Re: authentication failed...

On 2004-03-31, plan9fans <at> ntlworld.nospam.com wrote:
> I can see the error message is from fossil
> /sys/src/cmd/fossil/9user.c:89 but where the username
> 'write' comes from I have no idea.

When a group called write exists, only users of that
group have write permission on the file server. To
all others, the server appears read-only. This is what
fossil(4) says.

Nils.

--

-- 
Nils M Holm <nmh <at> t3x.org> -- http://www.t3x.org/nmh/
Permalink | Reply | 0 comments |
headers
Fco.J.Ballesteros | 1 Apr 2004 10:45

x10

I've pushed to sources a program called lights,
that is a gui for the x10 file system. It can be used to
see the status of lights/sensors and to change them by
using the mouse.

The file system (cm11 driver) has some bugs fixed too.

hth
Permalink | Reply | 45 comments |
headers
David Cantrell | 1 Apr 2004 11:07
Picon
Favicon
Gravatar

Re: 9conlon ...

On Wed, Mar 31, 2004 at 03:13:19PM +0100, Dave Lukes wrote:

> P.S. We're up to 13 definite attendees, plus a couple of maybes!

Count me as a maybe too.  I won't know if I can attend until maybe a
week before the con.  But I live in London, so at least sorting out
accomodation won't be a problem :-)

--

-- 
Grand Inquisitor David Cantrell | http://www.cantrell.org.uk/david

  The test of the goodness of a thing is its fitness for use.  If it
  fails on this first test, no amount of ornamentation or finish will
  make it any better, it will only make it more expensive and foolish.
     -- Frank Pick, lecture to the Design and Industries Assoc, 1916
Permalink | Reply | 1 comment |
headers
Bengt Kleberg | 1 Apr 2004 12:50
Picon
Favicon

Re: acme, rio workalike available in plan 9 ports

Russ Cox wrote:
...deleted
> 
> the problem isn't that i don't know what the structure should look like.
> the problem is that i don't want to do it.  i find it annoying to have
> to type things like /usr/local/plan9/FreeBSD/386/bin/acme,

surely you would have set your $path to include 
/usr/local/plan9/FreeBSD/386/bin ?

 > and further
> it makes writing shell scripts impossible:
> 
>    #!/usr/local/plan9/FreeBSD/386/bin/rc
> 
> isn't very portable!  you'd have to have a shell script "rc" that ran
> the binary rc and then use
> 
>    #!/usr/local/plan9/rc/bin/rc
> 
> or something like that.  it's just disgusting.

is it correct to assume that this unportableness of rc scripts is the 
reason for using /bin/sh all over the place? including in mk, which is 
not entirely to my liking.

 > i don't have many
> environments
> where different architectures share a tree like /usr/local, so i don't 
> worry
(Continue reading)

Permalink | Reply | 44 comments |
headers
Russ Cox | 1 Apr 2004 15:20

Re: multiple certs

Brantley Coile wrote:

>So, maybe I missed it.  Did anyone have a suggestion
>on how to send a certificate chain in tlssrv?
>  
>

use the source, luke.
Permalink | Reply | 2 comments |

Gmane