[Vm-dev] Re: [squeak-dev] SqueakSSL + SAN certificates
David T. Lewis
lewis at mail.msen.com
Mon Jun 1 23:57:13 UTC 2015
Hi Levente,
Regarding your VM changes for SqueakSSL, shall I commit these to the SVN
trunk repository? Ian delegated access to platforms/unix so that I can do
that for you if you like.
We have several Mantis entries to track your SqueakSSL work:
http://bugs.squeak.org/view.php?id=7751 (Add SSL plugin)
http://bugs.squeak.org/view.php?id=7793 (Memory leak in the SqueakSSL plugin on unix)
http://bugs.squeak.org/view.php?id=7824 (Add TLS SNI Server Name Indication support to SqueakSSL plugin)
Your latest version http://leves.web.elte.hu/squeak/SqueakSSL/ adds
the SAN certificates support, so I think we should commit your latest
version and close the Mantis issues.
If you agree I will update the SVN files.
Thanks,
Dave
p.s. There are still issues in SqueakSSL when sizeof(sqInt) is 8
(64 bit images) but that is a separate discussion.
On Tue, May 26, 2015 at 11:55:42PM +0200, Levente Uzonyi wrote:
> Hi All,
>
> I've implemented support for reading the domain names from the
> certificate's SAN extension[1] in SqueakSSL.
> The image side code is in the Inbox[2]. It is backwards compatible --
> everything works as before without the VM changes.
> I've also uploaded the modified files[3][4] for the unix platform, and a
> diff[5] (which somehow doesn't include the changes of the .h file).
>
> The VM support code for other platforms are to be done.
>
> These changes fix the failing SqueakSSL test in the Trunk, so I suggest
> including the .mcz file in the 4.6 release.
>
> Levente
>
> [1] https://en.wikipedia.org/wiki/SubjectAltName
> [2]
> http://lists.squeakfoundation.org/pipermail/squeak-dev/2015-May/184581.html
> [3] http://leves.web.elte.hu/squeak/SqueakSSL/SqueakSSL.h
> [4] http://leves.web.elte.hu/squeak/SqueakSSL/sqUnixOpenSSL.c
> [5] http://leves.web.elte.hu/squeak/SqueakSSL/diff.txt
More information about the Vm-dev
mailing list