From: Nick Porter <nick@portercomputing.co.uk>
Date: Thu, 2 Jan 2025 19:22:18 +0000 (+0000)
Subject: Report when certificate extensions fail to be extracted
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=85a68da14678849cb30e41f69ea9ecef78ac744b;p=thirdparty%2Ffreeradius-server.git

Report when certificate extensions fail to be extracted
---

diff --git a/src/lib/tls/pairs.c b/src/lib/tls/pairs.c
index f2f18ca923f..3ba23413451 100644
--- a/src/lib/tls/pairs.c
+++ b/src/lib/tls/pairs.c
@@ -311,7 +311,10 @@ skip_alt:
 
 			fr_tls_bio_dbuff_reset(bd);	/* 'free' any data used */
 
-			X509V3_EXT_print(bio, ext, 0, 0);
+			if (X509V3_EXT_print(bio, ext, 0, 0) != 1) {
+				REDEBUG("Failed extracting data for \"%s\"", da->name);
+				goto again;
+			}
 
 			MEM(vp = fr_pair_afrom_da(ctx, da));
 			if (fr_pair_value_from_str(vp, (char *)fr_dbuff_current(out), fr_dbuff_remaining(out),