]> granicus.if.org Git - curl/commitdiff
OpenSSL: support longer certificate subject names
authorDaniel Stenberg <daniel@haxx.se>
Fri, 8 Jun 2012 22:06:54 +0000 (00:06 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Fri, 8 Jun 2012 22:06:54 +0000 (00:06 +0200)
Previously it would use a 256 byte buffer and thus cut off very long
subject names. The limit is now upped to the receive buffer size, 16K.

Bug: http://curl.haxx.se/bug/view.cgi?id=3533045
Reported by: Anthony G. Basile

lib/ssluse.c

index a55ad3ce11e757e6b7a8a9245d9bccbc8a8d2ddf..7ca46666304ae580e33a7023ff520a75fce92769 100644 (file)
@@ -2284,7 +2284,7 @@ static CURLcode servercert(struct connectdata *conn,
   struct SessionHandle *data = conn->data;
   X509 *issuer;
   FILE *fp;
-  char buffer[256];
+  char *buffer = data->state.buffer;
 
   if(data->set.ssl.certinfo)
     /* we've been asked to gather certificate info! */
@@ -2301,7 +2301,7 @@ static CURLcode servercert(struct connectdata *conn,
   infof (data, "Server certificate:\n");
 
   rc = x509_name_oneline(X509_get_subject_name(connssl->server_cert),
-                          buffer, sizeof(buffer));
+                         buffer, BUFSIZE);
   if(rc) {
     if(strict)
       failf(data, "SSL: couldn't get X509-subject!");