src/openssl.c: Add attributes methods on x509.csr #218
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What does it do?
Add methods on CSR to deal with attributes
This is submitted for feedback not for merge yet. Obvious warts
I would welcome any and all comment/criticism about api design, coding standards, etc etc
Why is is useful?
My use case for this is that I want a program that replicates the Puppet CA "policy based keysigning" functionality. The client generates a CSR with a pre-shared key embedded, and submits it for signing using an API: the API server checks for that PSK and decides whether or not to sign it. The convention seems to be to use the
challengePassword
custom attribute for this purpose, so I needed a way of getting to it.