[PATCH] Add ssl_client_EKU nginx variable.

Andrey Kulikov amdeich at gmail.com
Thu Sep 10 16:28:21 UTC 2015


Hi,

On 10 September 2015 at 18:48, Maxim Dounin <mdounin at mdounin.ru> wrote:

> Instead, you may consider obtaining the
> certificate itself and parsing needed details from it.
>

Indeed, certificate itself available as variable.
But parsing properly it is not so trivial task. And what should gear that
parsing on frontend side?
I do not know such usable tools. Even lua-opeanssl, in current state, far
from leting this done.

>From the other hand, EKU is not a rocket since - it's a information
presented in any real-world certificate, and used for multiple purposes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx-devel/attachments/20150910/cea42f1e/attachment.html>


More information about the nginx-devel mailing list