From: Michael Brown <mcb30@ipxe.org>
Date: Wed, 9 May 2012 09:07:16 +0000 (+0100)
Subject: [crypto] Include "?subject=" in cross-signed certificate URI
X-Git-Tag: v1.20.1~1794
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4855e86d959a3e1934dace816d5f5876ceb76411;p=thirdparty%2Fipxe.git

[crypto] Include "?subject=" in cross-signed certificate URI

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/src/net/validator.c b/src/net/validator.c
index 0d24b4572..80fecea89 100644
--- a/src/net/validator.c
+++ b/src/net/validator.c
@@ -151,8 +151,8 @@ static int validator_start_download ( struct validator *validator,
 	crosscert = ( crosscert_copy ? crosscert_copy : crosscert_default );
 
 	/* Allocate URI string */
-	uri_string_len = ( strlen ( crosscert ) + 14 /* "/%08x.der?" */ +
-			   base64_encoded_len ( issuer->len ) + 1 /* NUL */ );
+	uri_string_len = ( strlen ( crosscert ) + 22 /* "/%08x.der?subject=" */
+			   + base64_encoded_len ( issuer->len ) + 1 /* NUL */ );
 	uri_string = zalloc ( uri_string_len );
 	if ( ! uri_string ) {
 		rc = -ENOMEM;
@@ -163,7 +163,7 @@ static int validator_start_download ( struct validator *validator,
 	crc = crc32_le ( 0xffffffffUL, issuer->data, issuer->len );
 
 	/* Generate URI string */
-	len = snprintf ( uri_string, uri_string_len, "%s/%08x.der?",
+	len = snprintf ( uri_string, uri_string_len, "%s/%08x.der?subject=",
 			 crosscert, crc );
 	base64_encode ( issuer->data, issuer->len, ( uri_string + len ) );
 	DBGC ( validator, "VALIDATOR %p downloading cross-signed certificate "