Re: {bb} bbgen & https test

["Marco Avvisano" <m.avvisano@mail.regione.toscana.it>]

Ciao Henrik

i have tested the the  https, in the new bbgen release, using a pem
certificate,  and it work very well.
It's possible also to use the CERT option together the cont option?


you are great!!

Marco



> Ciao Marco,
>
> In <ch1fea$uu9$1@voodoo.hswn.dk> Henrik Storner <henrik-bb@hswn.dk>
writes:
>
> >In <002101c48f29$a5c24560$2b01d59f@pcma13319new> "Marco Avvisano"
<m.avvisano@mail.regione.toscana.it> writes:
>
> >>So, i think that the problem is that the page is not accessible without
the
> >>certificate.
>
> >Do I understand correct - this server requires a *client* certificate
> >for authorization ?
>
> >The curl library which bbgen 2.x uses does support client certificates
> >with the "-E / --cert" option. But this is not used by bbgen.
>
> >Looking at the OpenSSL docs it should not be too hard to implement.
> >Would you be willing to test it for me ?
>
> I have implemented this for the new bbgen 3.0 release, which I expect
> to have ready in a few days.
>
> If you could test it for me, I would much appreciate it. The current
> snapshot of the bbgen 3.0 release is available on
> http://www.hswn.dk/bbgen/alpha/bbgen-2.99-20040831.tar.gz
>
> To use a client certificate for authorization, you need to store the
> certificate in PEM format in $BBHOME/certs/filename.pem . Then in the
> bb-hosts file you link to the certificate with a URL like this:
>
>   10.1.2.3  www.web.com  # https://CERT:filename.pem@www.web.com/
>
> i.e. you have word "CERT:" and then the PEM filename where you would
> otherwise have a username/password for the website.
>
> If the PEM certificate uses a private key with a password, you must
> put the password (in clear text!) in $BBHOME/certs/filename.pass,
> i.e. same filename as the certificate except it has extension ".pass".
>
> The bb-hosts(5) man-page documents this, and also has instructions on
> how to generate a PEM-formatted certificate file from a certificate
> stored in your MS Internet Explorer certificate database.
>
> And I found out that I do have a site using client certificates,
> and it actually worked when I tried it ....
>
>
> Henrik
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> To unsubscribe from this list, or to subscribe to the bb-digest list
> send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
> subscribe bb-digest in the BODY of the message.
>

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.