Another patch for X509 validation

Alan DeKok aland at
Mon Nov 6 16:43:04 CET 2006

"Juan C. Sanchez-DelBarrio" <carlos.sanchez at> wrote:
> I follow with the idea of the other developer. In our organization, we
> need that you can filter not only using check_cert_cn if not using
> organizational-unit (O) of the DN. Firstly, we propose the following
> patch using external script where you can define your own filter.


> +ATTRIBUTE       X509-Subject                            1102    string
> +ATTRIBUTE       X509-Issuer                             1103    string
> +#define PW_X509_SUBJECT			1100
> +#define	PW_X509_ISSUER			1101

  That's a typo.

  It looks interesting, though.

  Alan DeKok.
--       - The web site of the book - The blog

More information about the Freeradius-Devel mailing list