OpenKMIP / PyKMIP / 333

86%

master: 23%

push

travis-ci

Adding session extraction of client identity from certificates

This change updates the KmipSession, allowing it to extract client
identity from the client certificate of a TLS connection. The
certificate subject common name is used as the client identity if
the certificate has client authentication set in the extended key
usage extension.

This change breaks backwards compatibility. If a client certificate
does not define a client identity, the session will reject it and
shutdown the connection. Any client certificates used to connect
with the software server in the past will need to be replaced with
certificates that define a suitable client identity.

23 of 23 new or added lines in 1 file covered. (100.0%)

6741 of 7823 relevant lines covered (86.17%)

3.44 hits per line