]> granicus.if.org Git - apache/commit
Improve mod_ssl's environment variable extraction to correctly handle
authorJoe Orton <jorton@apache.org>
Tue, 9 Dec 2008 14:41:21 +0000 (14:41 +0000)
committerJoe Orton <jorton@apache.org>
Tue, 9 Dec 2008 14:41:21 +0000 (14:41 +0000)
commit778a79de6533d9bf45088cd63f7d16d2174f9e9b
tree01a3461009383e372fdd7a29aa26f04e17e7cb63
parentdce91079c126cffc7807b2fcf0a8a013e5e79a3a
Improve mod_ssl's environment variable extraction to correctly handle
DNs with duplicate tags:

* modules/ssl/ssl_engine_vars.c:
  Augment the ssl_var_lookup_ssl_cert_dn_rec table with a flag
  to indicate whether RDNs of the given NID should be extracted
  to the environment.
  (extract_dn, modssl_var_extract_dns): New functions.

* modules/ssl/ssl_private.h (modssl_var_extract_dns): Add prototype.

* modules/ssl/ssl_engine_kernel.c: Remove SSL_*_DN_ from the list
  of variables to insert into the environment.
  (ssl_hook_Fixup): Use modssl_var_extract_dns to insert the
  SSL_*_DN_ variables efficiently and accurately, handling
  certs with duplicate RDN tags correctly.

PR: 45875

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@724717 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/ssl/ssl_engine_kernel.c
modules/ssl/ssl_engine_vars.c
modules/ssl/ssl_private.h