CertInfo (Socket function) - Revision history

JAL: add 7.7 maximum length

2016-08-29T22:53:43Z

add 7.7 maximum length

← Older revision		Revision as of 22:53, 29 August 2016
Line 85:		Line 85:
	<td>The length of the private key used by the signer or the client. Private key lengths are usually expressed in terms of number of bits, so <var>PRIVATEKEYLENGTH</var> returns a decimal number string, such as <code>512</code> or <code>1024</code>.		<td>The length of the private key used by the signer or the client. Private key lengths are usually expressed in terms of number of bits, so <var>PRIVATEKEYLENGTH</var> returns a decimal number string, such as <code>512</code> or <code>1024</code>.
	<p>		<p>
	This value could be used to determine a "level of trustworthiness" of a client certificate, where a ~~512~~-bit certificate is considered somewhat weak (though probably strong enough for all but the most extreme security requirements), and a ~~1024~~-bit certificate is considered strong. <var class="product">Janus Network Security</var> will not accept certificates that indicate private keys shorter than 512 bits or longer than 2048 bits. Generally, client certificates use either a ~~512~~-bit or a ~~1024~~-bit key.</p>		This value could be used to determine a "level of trustworthiness" of a client certificate, where a 1024-bit certificate is considered somewhat weak (though probably strong enough for all but the most extreme security requirements), and a 2048-bit certificate is considered strong. <var class="product">Janus Network Security</var> will not accept certificates that indicate private keys shorter than 512 bits or longer than 4096 (as of version 7.7 of Model 204; formerly, 2048 bits). Generally, client certificates use either a 1024-bit or a 2048-bit key.</p>
	<p>		<p>
	<var>PRIVATEKEYLENGTH</var> can be abbreviated <var>PRIVATEKEYL</var>, <var>PKEYLENGTH</var>, or <var>PKEYL</var>. </p>		<var>PRIVATEKEYLENGTH</var> can be abbreviated <var>PRIVATEKEYL</var>, <var>PKEYLENGTH</var>, or <var>PKEYL</var>. </p>

JAL: /* Syntax terms */ link repair

2016-05-31T21:33:07Z

Syntax terms: link repair

← Older revision		Revision as of 21:33, 31 May 2016
Line 25:		Line 25:
	<td>The certificate level at which to obtain the entity. Level 0 corresponds to the client or the "subject" of the certificate; level 1 to the "signer" of the certificate; level 2 to the "signer" of the level 1 signer's certificate; and so on.		<td>The certificate level at which to obtain the entity. Level 0 corresponds to the client or the "subject" of the certificate; level 1 to the "signer" of the certificate; level 2 to the "signer" of the level 1 signer's certificate; and so on.
	This argument is optional; the default value is 1.		This argument is optional; the default value is 1.
	For more information about certificate levels, see the <var>[[CertLevels (Socket function)\|CertLevels]]</var> function and see ~~the~~ <var class="~~book~~">[[~~Media:JansslrNew.pdf\|~~Janus Network Security ~~Reference Manual~~]]</var>.		For more information about certificate levels, see the <var>[[CertLevels (Socket function)\|CertLevels]]</var> function and see <var class="product">[[Janus Network Security]]</var>.
	</td></tr>		</td></tr>
	</table>		</table>

JAL: /* See also */ add link

2016-05-25T19:22:23Z

JAL: /* See also */ add item

2016-05-25T19:00:28Z

JAL: add link

2016-05-25T18:44:51Z

add link

← Older revision		Revision as of 18:44, 25 May 2016
Line 25:		Line 25:
	<td>The certificate level at which to obtain the entity. Level 0 corresponds to the client or the "subject" of the certificate; level 1 to the "signer" of the certificate; level 2 to the "signer" of the level 1 signer's certificate; and so on.		<td>The certificate level at which to obtain the entity. Level 0 corresponds to the client or the "subject" of the certificate; level 1 to the "signer" of the certificate; level 2 to the "signer" of the level 1 signer's certificate; and so on.
	This argument is optional; the default value is 1.		This argument is optional; the default value is 1.
	For more information about certificate levels, see the <var class="book">[[Media:JansslrNew.pdf\|Janus Network Security Reference Manual]]</var>.		For more information about certificate levels, see the <var>[[CertLevels (Socket function)\|CertLevels]]</var> function and see the <var class="book">[[Media:JansslrNew.pdf\|Janus Network Security Reference Manual]]</var>.
	</td></tr>		</td></tr>
	</table>		</table>
Line 96:		Line 96:
	</td></tr>		</td></tr>

	<tr><th>PERMANENTKEYLENGTH		<tr><th>PERMANENTKEYLENGTH</th>
	</th><td>The length of the permanent private key. Since SSL client certificate support does not cover ephemeral private keys, and in fact, such support would be largely meaningless anyway, <var>PERMANENTKEYLENGTH</var> always returns a the same value as <var>PRIVATEKEYLENGTH</var>. It is simply included here for compatibility with the equivalent <var class="product">Janus Sockets</var> function (<var>[[$Sock_Cert_Info</var>) or <var>Socket</var> object method (<var>[[CertInfo (Socket function)\|CertInfo]]</var>).		<td>The length of the permanent private key. Since SSL client certificate support does not cover ephemeral private keys, and in fact, such support would be largely meaningless anyway, <var>PERMANENTKEYLENGTH</var> always returns a the same value as <var>PRIVATEKEYLENGTH</var>. It is simply included here for compatibility with the equivalent <var class="product">Janus Sockets</var> function (<var>[[$Sock_Cert_Info]]</var>) or <var>Socket</var> object method (<var>[[CertInfo (Socket function)\|CertInfo]]</var>).
	<p>		<p>
	<var>PERMANENTKEYLENGTH</var> can be abbreviated <var>PERMANENTKEYL</var>, <var>PERMKEYLENGTH</var>, or <var>PERMKEYL</var>. </p>		<var>PERMANENTKEYLENGTH</var> can be abbreviated <var>PERMANENTKEYL</var>, <var>PERMKEYLENGTH</var>, or <var>PERMKEYL</var>. </p>

JAL: misc cleanup

2016-05-25T18:13:16Z

misc cleanup

Show changes

JAL: link repair

2014-12-04T19:52:18Z

link repair

JAL at 21:31, 23 July 2013

2013-07-23T21:31:11Z

← Older revision		Revision as of 21:31, 23 July 2013
Line 4:		Line 4:
	levels of the SSL certificate provided on a socket by the remote partner.		levels of the SSL certificate provided on a socket by the remote partner.
	The <var>CertInfo</var> function has an effect similar to		The <var>CertInfo</var> function has an effect similar to
	its equivalent $function, <var>[[$~~Sock_cert_info~~]]</var>.		its equivalent $function, <var>[[$Sock_Cert_Info]]</var>.

	==Syntax==		==Syntax==

JAL2: /* Syntax terms */

2011-11-15T01:38:28Z

Syntax terms

← Older revision		Revision as of 01:38, 15 November 2011
Line 17:		Line 17:
	<td>A variable or an expression that is a reference to a socket object.		<td>A variable or an expression that is a reference to a socket object.
	</td></tr>		</td></tr>
	<tr><th>~~entity~~</th>		<tr><th>string</th>
	<td>The name of the requested entity, the options for which are listed below.		<td>The name of the requested entity, the options for which are listed below.
	</td></tr>		</td></tr>
	<tr><th>~~level~~</th>		<tr><th>number</th>
	<td>The certificate level at which to obtain the entity. Level 0 corresponds to the client or the "subject" of the certificate; level 1 to the "signer" of the certificate; level 2 to the "signer" of the level 1 signer's certificate; and so on.		<td>The certificate level at which to obtain the entity. Level 0 corresponds to the client or the "subject" of the certificate; level 1 to the "signer" of the certificate; level 2 to the "signer" of the level 1 signer's certificate; and so on.
	This argument is optional; the default value is 1.		This argument is optional; the default value is 1.

JAL2 at 01:36, 15 November 2011

2011-11-15T01:36:40Z

← Older revision		Revision as of 01:36, 15 November 2011
Line 27:		Line 27:
	</td></tr></table>		</td></tr></table>

	===Certificate entities===		==Certificate entities==
	The following entities can be requested with <var>CertInfo</var>:		The following entities can be requested with <var>CertInfo</var>:
	<table>		<table>

← Older revision		Revision as of 19:22, 25 May 2016
Line 169:		Line 169:
	==See also==		==See also==
	<ul>		<ul>
	<li>The <var>[[ClientCertificate (XmlDoc function)\|ClientCertificate]]</var> <var>XmlDoc</var> method can obtain and ~~print~~ certificate information similar to <var>CertInfo</var>. </li>		<li>The <var>[[ClientCertificate (XmlDoc function)\|ClientCertificate]]</var> <var>XmlDoc</var> method and the <var>[[AppendCertificateRequestInfo (Stringlist function)\|AppendCertificateRequestInfo]]</var> <var>Stringlist</var> method can both obtain and store certificate information similar to <var>CertInfo</var>. </li>
	</ul>		</ul>

	{{Template:Socket:CertInfo footer}}		{{Template:Socket:CertInfo footer}}

← Older revision		Revision as of 19:00, 25 May 2016
Line 168:		Line 168:

	==See also==		==See also==
			<ul>
			<li>The <var>[[ClientCertificate (XmlDoc function)\|ClientCertificate]]</var> <var>XmlDoc</var> method can obtain and print certificate information similar to <var>CertInfo</var>. </li>
			</ul>

	{{Template:Socket:CertInfo footer}}		{{Template:Socket:CertInfo footer}}

← Older revision		Revision as of 19:52, 4 December 2014
Line 108:		Line 108:
	<ul>		<ul>
	<li><var>CertInfo</var> returns the null string if the socket is not open		<li><var>CertInfo</var> returns the null string if the socket is not open
	and <code>ONRESET CONTINUE</code> is in effect for the socket.		and <code>ONRESET CONTINUE</code> is in effect for the socket.</li>

	<div id="reneg"></div>		<div id="reneg"></div>
	<li>As of <var class="product">Sirius Mods</var> 7.7,		<li>As of <var class="product">Sirius Mods</var> 7.7,
	if a Janus SSL server program issues the <var>CertInfo</var> or <var>CertLevels</var> method,		if a Janus SSL server program issues the <var>CertInfo</var> or <var>CertLevels</var> method,
	the returned string will be null if		the returned string will be null if
	the server port definition includes the <var>[[SSLCLCERT]]</var> or <var>[[SSLCLCERTR]]</var> parameter.		the server port definition includes the <var>[[SSLCLCERT and SSLCLCERTR\|SSLCLCERT]]</var> or <var>[[SSLCLCERT and SSLCLCERTR\|SSLCLCERTR]]</var> parameter.
	Those <var>[[JANUS DEFINE]]</var> parameters cause a request for a client certificate in the		Those <var>[[JANUS DEFINE]]</var> parameters cause a request for a client certificate in the
	initial server-client handshake that establishes the SSL connection.		initial server-client handshake that establishes the SSL connection.
Line 140:		Line 141:
	<ul>		<ul>
	<li>There is no reason a client would not return a certificate on an initial		<li>There is no reason a client would not return a certificate on an initial
	renegotiation, but return a certificate on a later renegotiation.		renegotiation, but return a certificate on a later renegotiation.</li>

	<li>There is no reason a client would return a certificate on an initial		<li>There is no reason a client would return a certificate on an initial
	renegotiation, then return a different client certificate on a subsequent SSL renegotiation.		renegotiation, then return a different client certificate on a subsequent SSL renegotiation.</li>
	</ul>		</ul></li>
	</ul>		</ul>