Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:48335
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.83.170 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        b=LARhRseZQ/S3F4ALmvuLsNj42Fdp/MId0fnoV5Qk6eGsaYzx1hi50hAm2DU680ulxW
         bsrAJTN5axlqiRCLwdzOp3MjTKgSsDGrvz+0cHnNJcVTbTc34w2RqmuRUgAPzOsCwakY
         BIe3CmFoIGNmKrhIFosqd1jlYa9OMjmA5kEV0=
MIME-Version: 1.0
In-Reply-To: <CC.D0.02762.88852FB4@pb1.pair.com>
References: <CC.D0.02762.88852FB4@pb1.pair.com>
Date: Tue, 18 May 2010 17:14:12 -0700
Message-ID: <AANLkTik-ytoV5kWbnZm7ZPTxaShjrdDm8RPOev8fCzjS@mail.gmail.com>
To: Nathan Rixham <nrixham@gmail.com>
Cc: internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] SPKAC support for openssl in PHP
From: sriram.natarajan@gmail.com (Sriram Natarajan)

I am curious as to why you need this feature within PHP. I would
expect that web server administrators typically need such feature but
I am missing the context of it within PHP script engine.

- Sriram

On Tue, May 18, 2010 at 2:05 AM, Nathan Rixham <nrixham@gmail.com> wrote:
> Hi All,
>
> Wondering if there is any support for SPKAC [1] in the openssl extension for
> PHP?
>
> If not is it planned, and if not can it be? KEYGEN/SPKAC support is growing
> in the UA vendors and KEYGEN is part of HTML5, being the preferred way to
> generate client side SSL certificates since the private key never leaves the
> browser. Further the need for client side certificate generation will be
> growing somewhat over the next couple of years thanks to FOAF+SSL - which I
> believe is about to start going through standardisation.
>
> At the minute we have to take a rather hacky approach in PHP [2] and it
> get's much worse if you want to use x509 v3 extensions, you have to go
> through a nasty process of using a bash script to gen a custom openssl.conf
> on the fly to use in the SPKAC request.
>
> Best,
>
> Nathan
>
> [1] http://en.wikipedia.org/wiki/Spkac
> [2]
> http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20080714/07ea5534/attachment.txt
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>