Re: SRP question

[Nikos Mavrogiannopoulos]

On 11/19/2011 04:32 PM, Rebel Neurofog wrote:
> Hi again!
> 
> I've got the picture with X.509.
> But now I'm trying to handle SRP authentication.
> 
> Simply using
> http://www.gnu.org/s/gnutls/manual/html_node/Echo-Server-with-SRP-authentication.html
> don't help much 'cause it is missing code getting information about
> user authenticated (or not authenticated).
> I've added "gnutls_srp_server_get_username (session)" after handshake
> but it returns NULL.

Then most probably it wasn't SRP that got negotiated. Check the
negotiated key exchange using gnutls_kx_get(). If you want to
force SRP then use a priority string of the form
"NORMAL:-KX-ALL:+SRP-RSA:+SRP-DSS:+SRP"

regards,
Nikos