Re: Including custom X.509 extension upon proxy renewal
Christopher Kunz <kunz@rvs.uni-hannover.de> wrote:
> Jim Basney schrieb:
>
> > Yes: ssl_proxy_delegation_init(), ssl_proxy_delegation_sign(), and
> > ssl_proxy_delegation_finalize().
>
> These operate on the request using the globus API functions. However, there
> doesn't seem to be a function in globus_gsi_proxy.h or anywhere else in the
> Globus API that adds a custom extension to a globus request handle.
>
> Is there any way to convert the handle back to an X509_REQ and operate on that
> from within ssl_proxy_delegation_sign?
Yes: globus_gsi_proxy_handle_get_req() and
globus_gsi_proxy_handle_set_req().
-Jim