Re: {bb} bbgen & https test

[Henrik Storner <henrik-bb@hswn.dk>]

Ciao Marco,

In <ch1fea$uu9$1@voodoo.hswn.dk> Henrik Storner <henrik-bb@hswn.dk> writes:

>In <002101c48f29$a5c24560$2b01d59f@pcma13319new> "Marco Avvisano" <m.avvisano@mail.regione.toscana.it> writes:

>>So, i think that the problem is that the page is not accessible without the
>>certificate.

>Do I understand correct - this server requires a *client* certificate
>for authorization ?

>The curl library which bbgen 2.x uses does support client certificates
>with the "-E / --cert" option. But this is not used by bbgen.

>Looking at the OpenSSL docs it should not be too hard to implement.
>Would you be willing to test it for me ?

I have implemented this for the new bbgen 3.0 release, which I expect
to have ready in a few days.

If you could test it for me, I would much appreciate it. The current
snapshot of the bbgen 3.0 release is available on
http://www.hswn.dk/bbgen/alpha/bbgen-2.99-20040831.tar.gz

To use a client certificate for authorization, you need to store the
certificate in PEM format in $BBHOME/certs/filename.pem . Then in the
bb-hosts file you link to the certificate with a URL like this:

  10.1.2.3  www.web.com  # https://CERT:filename.pem@www.web.com/

i.e. you have word "CERT:" and then the PEM filename where you would
otherwise have a username/password for the website.

If the PEM certificate uses a private key with a password, you must
put the password (in clear text!) in $BBHOME/certs/filename.pass,
i.e. same filename as the certificate except it has extension ".pass".

The bb-hosts(5) man-page documents this, and also has instructions on
how to generate a PEM-formatted certificate file from a certificate
stored in your MS Internet Explorer certificate database.

And I found out that I do have a site using client certificates, 
and it actually worked when I tried it ....


Henrik
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.