<meta charset="utf-8">Looking at openssl there is an rfc which tells how to convert from asn.1 to string: <a href="http://www.ietf.org/rfc/rfc2253.txt" target="_blank">http://www.ietf.org/rfc/rfc2253.txt</a><div><br></div>
<div>Cheers,</div>---<br>Massimo Paladin<br><br>email: <a href="mailto:massimo.paladin@gmail.com" target="_blank">massimo.paladin@gmail.com</a><br>website: <a href="http://www.mpaladin.com/" target="_blank">http://www.mpaladin.com</a><br>
flickr's page: <a href="http://flickr.com/photos/massimop" target="_blank">http://flickr.com/photos/massimop</a><br>
<br><br><div class="gmail_quote">On Tue, Jul 5, 2011 at 3:18 PM, Simon MacMullen <span dir="ltr"><<a href="mailto:simon@rabbitmq.com">simon@rabbitmq.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On 05/07/11 14:01, Massimo Paladin wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
This looks like limiting to certificates with only one and unique CN. Am<br>
I wrong?<br>
</blockquote>
<br></div>
Yes, that's correct.<br>
<br>
A future enhancement could be to allow rabbitmq_auth_mechanism_ssl to use the DN instead - after all, that's really what it's for.<br>
<br>
However, the (substantial) speedbump here is that RabbitMQ requires each user to have a user name, and each user name to be a string (I really wouldn't want to change that, implications would be far-reaching). But a DN isn't a string, it's an ASN.1 mess. And while there are a bunch of ways to convert that to a string, there's no good *canonical* way of doing it that I'm aware of.<br>
<br>
But I'm not a great expert in x509 / ASN.1. I don't know if you are or not :) but what would you do?<br>
<br>
Cheers, Simon<br><font color="#888888">
<br>
-- <br>
Simon MacMullen<br>
RabbitMQ, VMware<br>
______________________________<u></u>_________________<br>
rabbitmq-discuss mailing list<br>
<a href="mailto:rabbitmq-discuss@lists.rabbitmq.com" target="_blank">rabbitmq-discuss@lists.<u></u>rabbitmq.com</a><br>
<a href="https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss" target="_blank">https://lists.rabbitmq.com/<u></u>cgi-bin/mailman/listinfo/<u></u>rabbitmq-discuss</a><br>
</font></blockquote></div><br>