[Haskell-cafe] Taking the TLS package for a spin ... and failing

[Florian Weimer]

* Mads Lindstrøm:

> I got it to work :) But there seems to be some bugs in the Haskell
> server certificate handling. It seems that TLS do not transfer the ST
> (state, as in California) parameter in the X509 subject field. It also
> seems that the Haskell server do not send the email-address.

And in reality, DER encoding isn't reversible, so you better serve the
exact certificate blob which was passed to the server.  Decoding and
reencoding does not work reliably because sometimes, a non-DER version
of the certificate has been signed.