[PATCH] Add ssl_client_EKU nginx variable.

Andrey Kulikov amdeich at gmail.com
Thu Sep 10 16:28:21 UTC 2015


On 10 September 2015 at 18:48, Maxim Dounin <mdounin at mdounin.ru> wrote:

> Instead, you may consider obtaining the
> certificate itself and parsing needed details from it.

Indeed, certificate itself available as variable.
But parsing properly it is not so trivial task. And what should gear that
parsing on frontend side?
I do not know such usable tools. Even lua-opeanssl, in current state, far
from leting this done.

>From the other hand, EKU is not a rocket since - it's a information
presented in any real-world certificate, and used for multiple purposes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx-devel/attachments/20150910/cea42f1e/attachment.html>

More information about the nginx-devel mailing list