[Mono-bugs] [Bug 71696][Nor] Changed - mutual authentication with TLS, client certificate verify

bugzilla-daemon@bugzilla.ximian.com bugzilla-daemon@bugzilla.ximian.com
Tue, 12 Apr 2005 12:25:43 -0400 (EDT)


Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by sebastien@ximian.com.

http://bugzilla.ximian.com/show_bug.cgi?id=71696

--- shadow/71696	2005-04-12 12:17:08.000000000 -0400
+++ shadow/71696.tmp.20146	2005-04-12 12:25:43.000000000 -0400
@@ -1,12 +1,12 @@
 Bug#: 71696
 Product: Mono: Class Libraries
 Version: unspecified
 OS: SuSE 8.0
 OS Details: 
-Status: NEEDINFO   
+Status: REOPENED   
 Resolution: 
 Severity: Unknown
 Priority: Normal
 Component: Mono.Security
 AssignedTo: sebastien@ximian.com                            
 ReportedBy: mark.wuesthoff@middsol.com               
@@ -91,6 +91,22 @@
 dump of the handshake.
 
 Can you confirm this observation?
 
 Many thanks,
 Mark.
+
+------- Additional Comments From sebastien@ximian.com  2005-04-12 12:25 -------
+Yes Mark. The new sample was made to make it easier to compile/debug -
+not as a solution (I should have added a comment about this).
+
+Well now I can (at least) confirm that there is no problem with the
+PKCS #12 code. The decoded private key match the public key of the
+certificate (i.e. n == p * q).
+
+Sadly the server code doesn't send any alert back to the client and
+just close the connection. This is ok RFC/security wise but makes it
+hard to debug. The generated log file doesn't include any hints about
+why (or when) the connection is dropped.
+
+I'll try to get another test case using another server accepting
+client certificates.