[exim-dev] [Bug 1358] New: Want a way to pull fields out of …

------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1358
           Summary: Want a way to pull fields out of certificates
           Product: Exim
           Version: N/A
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: wishlist
          Priority: medium
         Component: String expansion
        AssignedTo: nigel@???
        ReportedBy: jgh146exb@???
                CC: exim-dev@???

It's not easy to get at, say, the Issuer of the client certificate acquired
with tls_verify_hosts. There are $tls_in_peerdn and $tls_in_sni but there is
not a general method.

Possibly an expansion item would work? Eg.

${cert_extract {field}{cert}{found}{notfound}}

Where:
field can expand to one of a list of well-known names, or an OID
cert can expand to "peer", "ocsp", a filename (?)
found is expanded with $value, if the field was found

All details up for discussion.


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email