Re: Network security manager

[Ted Zlatanov]

On Wed, 19 Nov 2014 12:19:46 +0100 Lars Magne Ingebrigtsen <address@hidden> 
wrote: 

LMI> Ted Zlatanov <address@hidden> cited:

>> "Also, we're hashing the SubjectPublicKeyInfo not the public key bit
>> string. The SPKI includes the type of the public key and some parameters
>> along with the public key itself."

(I didn't write the above originally, just cited it)

LMI> Does gnutls have a function to fingerprint that info?  Or access it in
LMI> raw form?  I guess we could just sha1 it ourselves.

http://gnutls.org/manual/gnutls.html#X_002e509-public-and-private-keys

You want gnutls_x509_crt_get_key_id() I think.  The key itself can be
exported with gnutls_pubkey_export2() into PEM or DER formats, but
that's not very useful in the NSM context

Ted