Re: Network security manager

[Lars Magne Ingebrigtsen]

Ted Zlatanov <address@hidden> writes:

> LMI> Ted Zlatanov <address@hidden> cited:
>
>>> "Also, we're hashing the SubjectPublicKeyInfo not the public key bit
>>> string. The SPKI includes the type of the public key and some parameters
>>> along with the public key itself."
>
> (I didn't write the above originally, just cited it)
>
> LMI> Does gnutls have a function to fingerprint that info?  Or access it in
> LMI> raw form?  I guess we could just sha1 it ourselves.
>
> http://gnutls.org/manual/gnutls.html#X_002e509-public-and-private-keys
>
> You want gnutls_x509_crt_get_key_id() I think.  The key itself can be
> exported with gnutls_pubkey_export2() into PEM or DER formats, but
> that's not very useful in the NSM context

Is that the SPKI or just a hash of the public key bit string?  >"?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no