Another patch for X509 validation

[Alan DeKok]

"Juan C. Sanchez-DelBarrio" <carlos.sanchez at bsc.es> wrote:
> I follow with the idea of the other developer. In our organization, we
> need that you can filter not only using check_cert_cn if not using
> organizational-unit (O) of the DN. Firstly, we propose the following
> patch using external script where you can define your own filter.

  Ok...

> +ATTRIBUTE       X509-Subject                            1102    string
> +ATTRIBUTE       X509-Issuer                             1103    string
...
> +#define PW_X509_SUBJECT			1100
> +#define	PW_X509_ISSUER			1101

  That's a typo.

  It looks interesting, though.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog