Skip to content

Add TLS-Certificate.Serial-Number-And-Issuer#5728

Open
minfrin wants to merge 1 commit intoFreeRADIUS:masterfrom
minfrin:snai
Open

Add TLS-Certificate.Serial-Number-And-Issuer#5728
minfrin wants to merge 1 commit intoFreeRADIUS:masterfrom
minfrin:snai

Conversation

@minfrin
Copy link
Copy Markdown

@minfrin minfrin commented Jan 25, 2026

The Serial Number and Issuer is a string format defined in RFC4523 called a CertificateExactAssertion that allows a unique instance of an X509 certificate to be identified independently of the contents of the certificate.

This interoperates with the SSL_CLIENT_CERT_RFC4523_CEA variable in Apache httpd's mod_ssl.

The Serial Number and Issuer is a string format defined in RFC4523 called a
CertificateExactAssertion that allows a unique instance of an X509 certificate
to be identified independently of the contents of the certificate.

This interoperates with the SSL_CLIENT_CERT_RFC4523_CEA variable in Apache
httpd's mod_ssl.
@arr2036
Copy link
Copy Markdown
Member

arr2036 commented Jan 25, 2026

@ndptech did you put the DER decoder behind a toggle yet?

@alandekok
Copy link
Copy Markdown
Member

@arr2036 The DER decoder is behind der_decode = yes in the TLS configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants