Re: Client script access to server cert info

Guys,

I may be totally wrong...but i always thought you could use openssl to get the server cert info remotely.

Ofcourse, this is not 'client side script'...but maybe a useful pointer...

Thanks
-N
----- Original Message -----
From: "Dawes, Rogan (ZA - Johannesburg)" <rdawes@deloitte.co.za> To: "'Jon Pastore'" <jpastore@idetech.net>; "Maupin, Tony" <Tony.Maupin@integris-health.com>; "'Brass, Phil (ISS Atlanta)'" <PBrass@iss.net>; <webappsec@securityfocus.com> Sent: Wednesday, April 16, 2003 8:48 AM
Subject: RE: Client script access to server cert info

> I did a quick search for Tony's search term, and it looks like he was
the
> ssl server cert will require getting a new application key as well.)
be
> trivial to bypass the checks, simply because perl is source code, not
few
> minutes, since all perl obfuscation modules can be trivially reversed (see
a
> fairly recent discussion here or on the secure programming list for
details,
> I forget which)
search
> eariler...I have an intranet application I sell based on perl that it
would
> be nice if we could make sure it only runs on the computer it was told to.
what
> > you're looking for. It will do everything you are asking and more.
> >
> > Tony Maupin
> >
> > -----Original Message-----
Received on Wed Apr 16 13:30:25 2003