View Single Post
Old 11-18-2013, 09:56 AM   #14
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
A for-real, serious question here

Now that this thread that includes non-Apache servers has caught the interest of "server type people" -
I have a serious question:

I have a need to support SRP over HTTPS (TLS-SRP) on a web site.

To do that with OpenSSL requires at least version 1.0.1
It can also be done using GNUTLS package (minimum version unknown).

Do any of these non-Apache servers support TLS-SRP authentication?

(My hosting provider does not support a new enough mod-ssl - good 'ol customer service says: "run your own server".)

Since TLS-SRP is only supported by a very limited number of browsers, the client code will be in Javascript:
http://code.google.com/p/srp-js/
knc1 is offline   Reply With Quote