Re: [pcp] Secure connections writeup - please review

[Dave Brolley <brolley@xxxxxxxxxx>]

On 02/01/2013 10:16 AM, Frank Ch. Eigler wrote:
> Nathan Scott <nathans@xxxxxxxxxx> writes:
>
> > [...]
> > http://oss.sgi.com/projects/pcp/pcp-gui.git/man/html/lab.secure.html
> - add code to the code (client-side changes only?) to enable clients
>    to download the server certificate during a first connection, and
>    store it in $HOME/.pcp/ssl, to eliminate the manual steps in the
>    "Monitor Setup" section.
I haven't yet reviewed this, but I can add to Frank's comments.

You can find code which does this in systemtap/csclient.cxx. The 
server's certificate is obtained by calling SSL_PeerCertificate 
(sslSocket) once a connection has been established. Have a look at the 
function trustNewServer to see how the certificate is then added to the 
client-side database of trusted servers.
Dave