[gnutls-devel] GnuTLS | Support for raw public keys for gnutls-cli and gnutls-serv (!1059)

[Development of GNU's TLS library]

Tom commented on a discussion on src/serv-args.def: https://gitlab.com/gnutls/gnutls/merge_requests/1059#note_213108027

>  };
>  
> +flag = {
> +    name      = rawpkkeyfile;
> +    arg-type  = string;
> +    descrip   = "PKCS #8 or PKCS #12 key file to use";
> +    doc       = "";
> +    max       = 1;
> +};
> +
> +flag = {
> +    name      = rawpkfile;
> +    arg-type  = string;
> +    descrip   = "Raw public-key file to use";
> +    doc       = "";
> +    max       = 1;

That's true but how are we going to make a distinction between these keys? We need an extra names argument per set of key pair arguments. This requires extra logic and makes setting up this application extra complex. Do we really want to add this functionality? Are people going to use this application with multiple rawpks for the server? I deliberately started out as simple as possible w.r.t. rawpk functionality. What do you think?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1059#note_213108027
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190905/864cae53/attachment.html>