[Haskell-cafe] Taking the TLS package for a spin ... and failing
fw at deneb.enyo.de
Tue Dec 14 22:24:29 CET 2010
* Mads Lindstrøm:
> I got it to work :) But there seems to be some bugs in the Haskell
> server certificate handling. It seems that TLS do not transfer the ST
> (state, as in California) parameter in the X509 subject field. It also
> seems that the Haskell server do not send the email-address.
And in reality, DER encoding isn't reversible, so you better serve the
exact certificate blob which was passed to the server. Decoding and
reencoding does not work reliably because sometimes, a non-DER version
of the certificate has been signed.
More information about the Haskell-Cafe