[New-bugs-announce] [issue28695] Add SSL_CTX_set_client_cert_engine

[Christian Heimes]

New submission from Christian Heimes:

Python's ssl module does not support smartcard authentication of clients.
In order to use an external engine like OpenSC's engine_pkcs11, SSLContext must be configured to use a loaded engine for client cert auth. It's really simple. Pseudo code without error reporting, engine_id is a char*:

ENGINE *e = ENGINE_by_id(engine_id);
SSL_CTX_set_client_cert_engine(ctx, e);

----------
assignee: christian.heimes
components: SSL
messages: 280830
nosy: christian.heimes
priority: normal
severity: normal
stage: needs patch
status: open
title: Add SSL_CTX_set_client_cert_engine
type: behavior

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue28695>
_______________________________________