[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Mon Sep 23 11:56:21 UTC 2019
New commits:
commit 53f63d7eb2cf0f64683b0ca7e824afe095d1f15a
Author: Andrew Cagney <cagney at gnu.org>
Date: Mon Sep 16 09:32:30 2019 -0400
x509: cleanup cert_VerifySubjectAltName(), and its use of idtoa()
- replace the id string parameter with the underlying id_t
this way the function, and not the caller, can control how the ID->A
conversion is performed
use jam_raw_bytes() so no sanitization occures and then sanitize the
raw ID when logging
- merge in d8529c6157d0cfe1620e7a7530bac1e5f1a1fb2d's code logging both
the ID's type and text into function
suspect ID_ prefix should be dropped
and drop redundant logging at call site; update tests
- merge in d8529c6157d0cfe1620e7a7530bac1e5f1a1fb2d's
passert(raw_id[0]=='@') but as as a pexpect()
discover bug where one caller is passing in an ASN.1 DN ID with
first character discarded (it isn't '@')
suspect that calling with an ASN.1 DN ID (even after fix) is futile
suspect the code can check the ID's kind and then not bother when it
isn't an IP or DNS
- shuffle function body so that cert's alt name is upacked first
and try to clarify error messages; is there an nss error that can be
appended
More information about the Swan-commit
mailing list