Is it possible to use pyopenssl to create an ssl signature with
authenticated attributes, as defined in
rfc2315<http://www.faqs.org/rfcs/rfc2315.html>section 9.2, using
pyopenssl? If not, does anyone know of any tool that can
do this?
I am making a signing service for the Sugar environment. One assumption of
Sugar is that non-trusted applications can run, so the service needs to
include in the signature a hash of the application that requested the
signature. I need to use SSL-type signatures, and would prefer to use them
as defined in rfc2315 rather than invent a proprietary temporary
intermediate format of data-plus-requesting-app for signing.
Thanks,
Jameson
|