- Fix #527: not sending quad9 cert to syslog (and may be more).

diff --git a/doc/Changelog b/doc/Changelog
index 26c66e65edb1f42a2651e2cfef78ce905da77ad8..103fb37cb49d1895cb23a05224bddebd86adab7b 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,6 +1,7 @@
 17 August 2021: Wouter
        - Fix that --with-ssl can use "/usr/include/openssl11" to pass the
          location of a different openssl version.
+       - Fix #527: not sending quad9 cert to syslog (and may be more).
 
 16 August 2021: George
        - Merge PR #528 from fobser: Make sldns_str2wire_svcparam_buf()

diff --git a/util/net_help.c b/util/net_help.c
index b2d2061c92c5213c2ecdee382247abf943e729f0..3a671777cfd58df0ecb742aebffd06c8cf59736e 100644 (file)
--- a/util/net_help.c
+++ b/util/net_help.c
@@ -881,6 +881,12 @@ log_cert(unsigned level, const char* str, void* cert)
        BIO_write(bio, &nul, (int)sizeof(nul));
        len = BIO_get_mem_data(bio, &pp);
        if(len != 0 && pp) {
+               /* reduce size of cert printout */
+               char* s;
+               while((s=strstr(pp, "  "))!=NULL)
+                       memmove(s, s+1, strlen(s+1)+1);
+               while((s=strstr(pp, "\t\t"))!=NULL)
+                       memmove(s, s+1, strlen(s+1)+1);
                verbose(level, "%s: \n%s", str, pp);
        }
        BIO_free(bio);