cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: [PATCH]add --peer-CN-regex option to the command line tool

From: Ralph Mitchell <rmitchell_at_eds.com>
Date: Wed, 04 Jun 2003 00:04:16 -0500

M Biswas wrote:

> Daniel Stenberg wrote:
> > I like the idea and spirit of this patch, but I have a fundamental
> remark on
> > this particular implementation: I don't want us to add features to libcurl
> > what depends on a "POSIX 2 complient" regex library. I bet that rules out a
> > huge portion of the world, including Windows.
> >
> > I would guess that a much simpler approach would suffice for most people,
> > using good old and much simpler DOS-style wildcards. Don't you agree?
> >
>
> Why not use PCRE (http://www.pcre.org/)? Compatible license. POSIX
> compatible (as well as Perl compatible which is better). There's a
> Windows port. Given the list of other open-source tools using it:
>
> > PCRE was originally written for the Exim MTA, but is now used by many high-profile open source projects, including Python, Apache, PHP, KDE, ...
>
> It would appear portability is not a problem. Couldn't there just be a
> --with-pcre in configure?

There would need to be a fallback position, where simple DOS/Unix wildcards worked, because not everyone would need/want/have (pick one :-) PCRE.

Personally, I don't think I'd use anything beyond "*.domain.com", because that's all I need. A number of boxes here all use the same certificate
(e.g. www.domain.com), so when I hit each one to see if it's alive, I get back that one cert, and of course it doesn't match the box name (e.g.
server01.domain.com, server02.domain.com).

I'm doing this mostly within the company intranet though, and I'm just picking up pages to validate box health, so I'm not quite so concerned about
my connections being secure.

So, simple wildcards would be nice, and I probably wouldn't use PCRE.

Ralph Mitchell

-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
Received on 2003-06-04