Certificate information

[Arran Cudbard-Bell]

> On 30 Mar 2015, at 12:25, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> 
> 
>> On 30 Mar 2015, at 12:10, A.L.M.Buxey at lboro.ac.uk wrote:
>> 
>> Hi,
>> 
>>> So in theory if it appears as an X509 extension, and as Alan B said, you've created the appropriate
>>> RADIUS attribute, it'll automatically be decoded and placed in that attribute.
>> 
>> thought so :-)
>> 
>>> I'll modify it so it prints about a bit more info, like attributes that would have been defined had
>>> the appropriate RADIUS attribute been present. That should help you a bit.
>> 
>> that would be useful....but maybe only with a particular setting/flag?
> 
> Maybe RDEBUG3 so it doesn't appear with -X

OK, added that, run with -Xx and you should see attributes that were skipped

	vp = pairmake(talloc_ctx, certs, attribute, value, T_OP_ADD);
	if (!vp) {
		RDEBUG3("Skipping %s += '%s'.  Define %s in the server dictionary "
			"if you require this attribute", attribute, value, attribute);
	} else {
		rdebug_pair_list(L_DBG_LVL_2, request, vp, NULL);
	}

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150330/5e75853e/attachment.sig>