cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH] mk-ca-bundle.pl: 64 char wrapped PEMs

From: Guenter <lists_at_gknw.net>
Date: Wed, 03 Apr 2013 22:07:10 +0200

Hi Richard,
On 03.04.2013 19:13, Richard Michael wrote:
> mk-ca-bundle currently wraps PEM certs at 76 chars. I suspect 64
> chars would be more helpful, as it's consistent OpenSSL's (correct)
> PEM output. It's a fairly trivial issue, but it may have consequences
> of which I'm not aware. Any thoughts?
I dont think this is worth to change;
all base64 encoders/decoders I'm aware of can deal with any wrap; also
its possible to let mk-ca-bundle.pl use OpenSSL for the conversion so
that there should be no difference at all if you use that option - isnt
this enough? The non-openssl output would anyway look other even when
wraped at 64 chars than the openssl one, and thus isnt directly
comarable, and certainly not diff-able with a tool.

> Moreover, with a multitude of certificate formats and acronyms in the
> SSL domain, it is useful to output consistently formatted PEM
> certificates such that users are not confused by different "looking"
> certificates, despite identical technical function.
a holy wish ...

but what I think is worth to try is convincing the author of
MIME::Base64 to add a parameter / setting to the module so that one can
control the wrap ;-)

Gün.

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-04-03