<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Hi,</p>
<p style="margin-top:0;margin-bottom:0">Thank you for the response.</p>
<p style="margin-top:0;margin-bottom:0">Requesting to consider one more doubt regarding basic Server-certificate Verification.</p>
<p style="margin-top:0;margin-bottom:0">Does the package <span style="background-color: rgb(255, 255, 0);">
nopoll/Openssl </span><span style="background-color: rgb(255, 255, 0);">(in client side)</span> verify the public certificate received from Server using the entry in
<span style="background-color: rgb(255, 255, 0);">Client Global Store</span><span style="background-color: rgb(255, 255, 0);"> [</span><span style="background-color: rgb(255, 255, 0);">/etc/ssl/certs</span>] ?<br>
</p>
<p style="margin-top:0;margin-bottom:0">Currently, as per the nopoll code, what could we see is Server certificate is verified on the go (irrespective of the file either in Global Store or what mentioned as<span style="background-color: rgb(255, 255, 0);">
</span><span style="background-color: rgb(255, 255, 0);">r</span><span style="background-color: rgb(255, 255, 0);">o</span><span style="background-color: rgb(255, 255, 0);">o</span><span style="background-color: rgb(255, 255, 0);">t</span><span style="background-color: rgb(255, 255, 0);">.</span><span style="background-color: rgb(255, 255, 0);">p</span><span style="background-color: rgb(255, 255, 0);">e</span><span style="background-color: rgb(255, 255, 0);">m</span>
in the command).</p>
<p style="margin-top:0;margin-bottom:0"><font size="3" face="Calibri,Helvetica,sans-serif" color="black"><span style="font-size:12pt;" id="divtagdefaultwrapper"><font color="black"></p>
<div style="margin:14pt 30pt;"><a href="http://www.aspl.es/nopoll/html/group__nopoll__conn__opts_gaafe59c8b7baa3ed10cee191de98193cd.html#gaafe59c8b7baa3ed10cee191de98193cd" target="_blank" rel="noopener noreferrer" id="LPlnk280667" previewremoved="true"><span id="LPlnk280667">nopoll_conn_opts_set_ssl_certs</span></a>
(opts, </div>
<div style="margin:14pt 30pt;">// certificate </div>
<div style="margin:14pt 30pt;">"client.pem", </div>
<div style="margin:14pt 30pt;">// private key </div>
<div style="margin:14pt 30pt;">"client.pem", </div>
<div style="margin:14pt 30pt;">NULL, </div>
<div style="margin:14pt 30pt;">// ca certificate </div>
<div style="margin:14pt 30pt;"><span style="background-color: rgb(255, 255, 0);">"root.pem</span>");
</div>
</font></span></font><br>
<p></p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p></p>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<b><font size="3" face="Times New Roman"><font size="2" face="Arial"><span style="font-size: 11pt;">Could you please explain how the certificate is being verified? Even with the wrong certificate file mentioned as root.pem in the above command, connection is
getting successful when tried to implement HTTPS-MA.</span></font></font></b></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<font size="3" face="Times New Roman"><font size="2" face="Arial"><span style="font-size:9pt"><br>
</span></font></font></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<font size="3" face="Times New Roman"><font size="2" face="Arial"><span style="font-size:9pt"><br>
</span></font></font></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<font size="3" face="Times New Roman"><font size="2" face="Arial"><span style="font-size:9pt"><br>
</span></font></font></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<font size="3" face="Times New Roman"><font size="2" face="Arial"><span style="font-size:10pt">Regards,</span></font></font></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<font size="3" face="Times New Roman"><font size="2" face="Arial"><span style="font-size:12pt">Jawada Pallipath</span></font><font size="2" face="Arial" color="#4D4D4D"><span style="font-size:9pt"></span></font><font size="2" face="Arial" color="#4D4D4D"><span style="font-size:9pt"></span></font><font size="2" face="Arial" color="#4D4D4D"><span style="font-size:9pt"><br>
</span></font><font size="2" face="Arial" color="#0099FF"><span style="font-size:9pt"><span style="color:rgb(0,111,201)">TATA ELXSI</span><span style="font-size:10pt; color:rgb(0,111,201)"></span><span style="color:rgb(0,111,201)"></span><br>
</span></font></font></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin:0px">
<font size="3" face="Times New Roman"><a href="http://www.tataelxsi.com/" target="_blank" id="LPNoLP" title="Ctrl+Click or tap to follow the link"><font size="2" face="Arial" color="purple"><span id="LPNoLP" style="font-size:9pt; color:rgb(0,111,201)">www.tataelxsi.com</span></font></a></font></div>
<br>
<p></p>
<p></p>
<p><br>
</p>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Francis Brosnan Blázquez <francis.brosnan@aspl.es><br>
<b>Sent:</b> Tuesday, June 5, 2018 1:00:18 PM<br>
<b>To:</b> Jawada Pallipath<br>
<b>Cc:</b> nopoll@lists.aspl.es<br>
<b>Subject:</b> Re: [noPoll] Doubt Clearance Request</font>
<div> </div>
</div>
<meta content="text/html; charset=utf-8">
<meta name="x_GENERATOR" content="GtkHTML/4.8.5">
<div>Hi Jawada.<br>
<br>
No. That function takes all certificate information from the files you<br>
provide at the function. The content of these files are passed in into<br>
OpenSSL engine.<br>
<br>
It has no connection to any global store (unless OpenSSL does so, which<br>
I think it is not the case).<br>
<br>
Best Regards.<br>
<br>
<br>
El mar, 05-06-2018 a las 06:40 +0000, Jawada Pallipath escribió:
<blockquote type="CITE">Hi,<br>
<br>
Requesting kindly to respond to our query below .<br>
<br>
<br>
Does this command <br>
<br>
<br>
</blockquote>
<blockquote type="CITE"><a href="http://www.aspl.es/nopoll/html/group__nopoll__conn__opts_gaafe59c8b7baa3ed10cee191de98193cd.html#gaafe59c8b7baa3ed10cee191de98193cd">nopoll_conn_opts_set_ssl_certs</a> (opts,
</blockquote>
<blockquote type="CITE">// certificate </blockquote>
<blockquote type="CITE">"client.pem", </blockquote>
<blockquote type="CITE">// private key </blockquote>
<blockquote type="CITE">"client.pem", </blockquote>
<blockquote type="CITE">NULL, </blockquote>
<blockquote type="CITE">// ca certificate </blockquote>
<blockquote type="CITE">"root.pem"); </blockquote>
<blockquote type="CITE">takes root/ca/server certificate from Global store automatically ?
<br>
<br>
<br>
<br>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE"><font size="2">Regards,</font> </blockquote>
<blockquote type="CITE"><font size="2">Jawada Pallipath</font><br>
<font size="2"><font color="#0099ff">TATA ELXSI</font></font><br>
<br>
</blockquote>
<blockquote type="CITE"><font size="2"><font color="#800080"><a href="http://www.tataelxsi.com/">www.tataelxsi.com</a></font></font>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE">
<hr align="center">
</blockquote>
<blockquote type="CITE"><b><font color="#000000">From:</font></b><font color="#000000"> Francis Brosnan Blázquez <francis.brosnan@aspl.es></font><br>
<b><font color="#000000">Sent:</font></b><font color="#000000"> Monday, May 21, 2018 12:32:13 PM</font><br>
<b><font color="#000000">To:</font></b><font color="#000000"> Jawada Pallipath</font><br>
<b><font color="#000000">Cc:</font></b><font color="#000000"> nopoll@lists.aspl.es</font><br>
<b><font color="#000000">Subject:</font></b><font color="#000000"> Re: [noPoll] Doubt Clearance Request</font>
</blockquote>
<blockquote type="CITE"> </blockquote>
<blockquote type="CITE">Hello.<br>
<br>
You documentation about this in the manual:<br>
<br>
<a href="http://www.aspl.es/nopoll/html/nopoll_core_library_manual.html#nopoll_implementing_mutual_auth">http://www.aspl.es/nopoll/html/nopoll_core_library_manual.html#nopoll_implementing_mutual_auth</a><br>
<br>
You have also regression test check this support with working examples:<br>
<br>
<a href="https://github.com/ASPLes/nopoll/blob/master/test/nopoll-regression-client.c#L2080">https://github.com/ASPLes/nopoll/blob/master/test/nopoll-regression-client.c#L2080</a><br>
<br>
Best Regards.<br>
<br>
<br>
El sáb, 19-05-2018 a las 08:28 +0000, Jawada Pallipath escribió: <br>
<blockquote type="CITE">Hi,<br>
<br>
This is to request to clear a technical doubt regarding noPoll package. <br>
<br>
<br>
Doubt :<br>
<br>
Does this have any function to support HTTPS Mutual Authentication.<br>
<br>
Detail : As per Mutual Authentication Protocol, both Client and server have to authenticated from opposite sides and so, Client has to send it's certificate to Server, when server requests for it.
<br>
<br>
<br>
Is there any function to support this ?<br>
<br>
<br>
Kindly requesting to respond for the same .<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<font size="2">Regards,</font> <br>
<font size="2">Jawada Pallipath</font><br>
<font size="2"><font color="#0099ff">TATA ELXSI</font></font><br>
<br>
<font size="2"><font color="#800080"><a href="http://www.tataelxsi.com/">www.tataelxsi.com</a></font></font><br>
<br>
<br>
<pre>
_______________________________________________
noPoll mailing list
<a href="mailto:noPoll@lists.aspl.es">noPoll@lists.aspl.es</a>
<a href="http://lists.aspl.es/cgi-bin/mailman/listinfo/nopoll">http://lists.aspl.es/cgi-bin/mailman/listinfo/nopoll</a>
</pre>
</blockquote>
<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>
<pre>
</pre>
<br>
</td>
</tr>
</tbody>
</table>
</blockquote>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>
<pre>
--
Francis Brosnan Blázquez - ASPL
http://www.asplhosting.com/
http://www.aspl.es/
https://twitter.com/aspl_es
https://twitter.com/asplhosting
https://twitter.com/francisbrosnanb
https://es.linkedin.com/in/francis-brosnan-blázquez-1353a218
91 134 14 22 - 91 134 14 45 - 91 116 07 57
Av. Juan Carlos I 13, 2ºC, Torre Garena
28806 - Alcalá de Henares (España)
AVISO LEGAL
En virtud de lo dispuesto en la Ley Orgánica 15/1999, de 13 de
diciembre, de Protección de Datos de Carácter Personal, le informamos de
que sus datos de carácter personal, recogidos de fuentes accesibles al
público o datos que usted nos ha facilitado previamente, proceden de
bases de datos propiedad de Advanced Software Production Line, S.L.
(ASPL).
ASPL garantiza que los datos serán tratados con la finalidad de mantener
las oportunas relaciones comerciales o promocionales con usted o la
entidad que usted representa. No obstante, usted puede ejercitar sus
derechos de acceso, rectificación, cancelación y oposición dispuestos en
la mencionada Ley Orgánica, notificándolo por escrito a ASPL -
Protección Datos, Av. Juan Carlos I 13, 2ºC, Alcalá de Henares
(Madrid).
</pre>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>