18 reputation
4
bio website blog.casaricci.it
location Italy
age
visits member for 1 year
seen Oct 28 at 11:13

Founder and project leader of Kontalk http://www.kontalk.org/


Sep
24
awarded  Autobiographer
Mar
3
awarded  Supporter
Nov
13
comment OpenPGP/X.509 bridge: how to verify public key?
It's perfect :) Sorry I don't have enough reputation to vote your answer up...
Nov
13
awarded  Scholar
Nov
13
accepted OpenPGP/X.509 bridge: how to verify public key?
Nov
13
comment OpenPGP/X.509 bridge: how to verify public key?
Hi @owlstead your suggestions worked and I can now embed a PGP public key block as a custom extension. I will soon request a OID or use a UUID-generated OID. Please reply with an answer and I will mark it as accepted. Thank you!
Nov
7
comment OpenPGP/X.509 bridge: how to verify public key?
What about just checking if the private key that signed the certificate is the same of the PGP certificate included in the extension? I don't really need to authenticate (that's done at another layer), I just need to verify that the client owns the private key matching the PGP public key contained in the X.509 certificate.
Nov
7
comment OpenPGP/X.509 bridge: how to verify public key?
Matching the modulus came to my mind, it would be enough for identifying the key, wouldn't it? I could put the PGP certificate in a custom extension and compare its public key with the X.509 public key. Afterall all I need to do is verifying that the X.509 certificate is signed with the same PGP private key which I need to prove the ownership of.
Nov
7
awarded  Student
Nov
7
asked OpenPGP/X.509 bridge: how to verify public key?