]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Add optional _RAW suffix to SSL_*_DN_xx attribute names, allowing
authorJoe Orton <jorton@apache.org>
Thu, 12 Oct 2017 15:11:50 +0000 (15:11 +0000)
committerJoe Orton <jorton@apache.org>
Thu, 12 Oct 2017 15:11:50 +0000 (15:11 +0000)
commitd8afd98367ffcb4f1f761be58a775893c6debe85
tree8f7c5605800e4bbfc6dc9b2742421dcdf93308c5
parent4d4d063b67c33a9d86390939165c6b82314b4be0
Add optional _RAW suffix to SSL_*_DN_xx attribute names, allowing
users to convert an attribute value without conversion to UTF-8.  (A
public CA has issued certs with attributes tagged as the wrong ASN.1
string types.)

* modules/ssl/ssl_util_ssl.c (asn1_string_convert): Rename from
  asn1_string_to_utf8; add raw argument. Reimplement _to_utf8 as
  macro.
  (modssl_X509_NAME_ENTRY_to_string): Add raw argument.

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn): Use raw
  string conversion if _RAW suffix is present in DN component.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1811976 13f79535-47bb-0310-9956-ffa450edef68
docs/manual/mod/mod_ssl.xml
modules/ssl/ssl_engine_vars.c
modules/ssl/ssl_util_ssl.c
modules/ssl/ssl_util_ssl.h