Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:48312
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.42 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        b=VU7EB9Bd/uz7i6mpY1Pov9OYTR38hUkd3W1+zuOmOH+xGy9l8ZffFfsfDUmRPR95Ce
         98CTiZ2YEkr5ZXYrLhPMwcv1IkxDIG8UrCPmSiA6VLPN2dF87M3WwlmBiN9lv5MeqAWJ
         cCn2mESLlPwqrvQO/b0HzzFw76wWy1qLNa3tw=
MIME-Version: 1.0
In-Reply-To: <CC.D0.02762.88852FB4@pb1.pair.com>
References: <CC.D0.02762.88852FB4@pb1.pair.com>
Date: Tue, 18 May 2010 11:18:31 +0200
Message-ID: <AANLkTil1B-pnEHe1U0mb4dP4OQsZ7HslAJTP1RaElSgN@mail.gmail.com>
To: Nathan Rixham <nrixham@gmail.com>
Cc: internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] SPKAC support for openssl in PHP
From: pierre.php@gmail.com (Pierre Joye)

hi,

Can you open a feature request please? At http://bugs.php.net

On Tue, May 18, 2010 at 11:05 AM, Nathan Rixham <nrixham@gmail.com> wrote:
> Hi All,
>
> Wondering if there is any support for SPKAC [1] in the openssl extension for
> PHP?
>
> If not is it planned, and if not can it be? KEYGEN/SPKAC support is growing
> in the UA vendors and KEYGEN is part of HTML5, being the preferred way to
> generate client side SSL certificates since the private key never leaves the
> browser. Further the need for client side certificate generation will be
> growing somewhat over the next couple of years thanks to FOAF+SSL - which I
> believe is about to start going through standardisation.
>
> At the minute we have to take a rather hacky approach in PHP [2] and it
> get's much worse if you want to use x509 v3 extensions, you have to go
> through a nasty process of using a bash script to gen a custom openssl.conf
> on the fly to use in the SPKAC request.
>
> Best,
>
> Nathan
>
> [1] http://en.wikipedia.org/wiki/Spkac
> [2]
> http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20080714/07ea5534/attachment.txt
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>



-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org