[Gnu-arch-users] Client certificate goodness

[Matthew Palmer]

http://www.hezmatt.org/~mpalmer/mirrors/address@hidden
bazaar--client-certs--1.4--patch-1

From the patch log:

------>8------
Summary: Support client certificates on HTTPS connections

Immensely useful for shared archives and authenticating to HTTPS servers
without a password.

Use the ARCH_CLIENT_CERT environment variable to specify a file containing a
PKCS12 combined certificate (cert and private key together, protected by a
passphrase).  Use ~/.authinfo to specify the certificate's passphrase, like
so:

machine <server host> login <friendly name> password <passphrase>

More detailed instructions will be on the Wiki shortly.
------8<------

I'm not sure about the whole ARCH_CLIENT_CERT thing -- it smells strongly of
Major Hack to me, but it's better than nothing.  I'd like, if I could, to
extend the authinfo file format to include a cert parameter, but that would
require a bit more surgery than I really want to undertake right at this
moment (I need this functionality for work Right Now).

Appreciate a leg-up into baz and/or tla if it's deemed appropriate, or let
me know what I need to fix.

- Matt

signature.asc
Description: Digital signature