[gnutls-devel] GnuTLS | WIP: RFC7250 Raw public keys (!650)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos started a new discussion on lib/pcert.c:

>  
>  /* Converts the first certificate for the cert_auth_info structure
>   * to a pcert.
> + *
> + * REMARK 1: why limit ourselves to only be able to convert the first cert in the chain?
> + * REMARK 2: there is a lot of conversion between a raw cert / cert chain (gnutls_datum_t)
> + *   and gnutls_pcert_st going on (e.g. cert_auth_info to pcert). There is also quite some
> + *   overlap in data between these two types. The difference is that pcert holds only 1 cert

The pcert was made as a certificate generalization that would be efficient to use during a TLS (server) session (e.g., require very no additional processing on server side).

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/650#note_101410618
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20180914/3b49c7aa/attachment.html>