diff options
author | Nokis Mavrogiannopoulos | 2007-12-02 09:44:33 +0000 |
---|---|---|
committer | Nokis Mavrogiannopoulos | 2007-12-02 09:44:33 +0000 |
commit | d51667e406c2099865a4eec366fdab9d4578b683 (patch) | |
tree | 31c20456e88ea0c8366a3f9fc7c9d8b3bcaa9d6e | |
parent | fd94836e5162428f15393d4f9ea902533d9e1e90 (diff) |
-rw-r--r-- | NEWS | 4 | ||||
-rw-r--r-- | README.ENV | 4 | ||||
-rw-r--r-- | src/gnutls_hooks.c | 8 |
3 files changed, 8 insertions, 8 deletions
@@ -3,5 +3,5 @@ | |||
3 | - Added support for subject alternative names in certificates. | 3 | - Added support for subject alternative names in certificates. |
4 | Only one per certificate is supported. | 4 | Only one per certificate is supported. |
5 | 5 | ||
6 | - New enviroment variables: SSL_CLIENT_M_VERSION, SSL_CLIENT_SAN%, | 6 | - New enviroment variables: SSL_CLIENT_M_VERSION, SSL_CLIENT_S_SAN%, |
7 | SSL_SERVER_M_VERSION, SSL_SERVER_SAN% \ No newline at end of file | 7 | SSL_CLIENT_S_TYPE, SSL_SERVER_M_VERSION, SSL_SERVER_S_SAN%, SSL_SERVER_S_TYPE \ No newline at end of file |
@@ -19,7 +19,7 @@ SSL_CLIENT_V_START: The activation time of client's certificate. | |||
19 | SSL_CLIENT_V_END: The expiration time of client's certificate. | 19 | SSL_CLIENT_V_END: The expiration time of client's certificate. |
20 | SSL_CLIENT_S_DN: The distinguished name of client's certificate in RFC2253 format. | 20 | SSL_CLIENT_S_DN: The distinguished name of client's certificate in RFC2253 format. |
21 | SSL_CLIENT_I_DN: The distinguished name of client's issuer certificate in RFC2253 format. | 21 | SSL_CLIENT_I_DN: The distinguished name of client's issuer certificate in RFC2253 format. |
22 | SSL_CLIENT_SAN%: These will contain the alternative names of the client certificate | 22 | SSL_CLIENT_S_SAN%: These will contain the alternative names of the client certificate |
23 | (% is a number starting from zero). The values will be prepended by "DNSNAME:", | 23 | (% is a number starting from zero). The values will be prepended by "DNSNAME:", |
24 | "RFC822NAME:" or "URI:" depending on the type. If it is not supported the value | 24 | "RFC822NAME:" or "URI:" depending on the type. If it is not supported the value |
25 | "UNSUPPORTED" will be set. | 25 | "UNSUPPORTED" will be set. |
@@ -36,7 +36,7 @@ SSL_SERVER_V_START: The activation time of server's certificate. | |||
36 | SSL_SERVER_V_END: The expiration time of server's certificate. | 36 | SSL_SERVER_V_END: The expiration time of server's certificate. |
37 | SSL_SERVER_S_DN: The distinguished name of the server's certificate in RFC2253 format. | 37 | SSL_SERVER_S_DN: The distinguished name of the server's certificate in RFC2253 format. |
38 | SSL_SERVER_I_DN: The distinguished name of the server's issuer certificate in RFC2253 format. | 38 | SSL_SERVER_I_DN: The distinguished name of the server's issuer certificate in RFC2253 format. |
39 | SSL_SERVER_SAN%: These will contain the alternative names of the server certificate | 39 | SSL_SERVER_S_SAN%: These will contain the alternative names of the server certificate |
40 | (% is a number starting from zero). The values will be prepended by "DNSNAME:", | 40 | (% is a number starting from zero). The values will be prepended by "DNSNAME:", |
41 | "RFC822NAME:" or "URI:" depending on the type. If it is not supported the value | 41 | "RFC822NAME:" or "URI:" depending on the type. If it is not supported the value |
42 | "UNSUPPORTED" will be set. | 42 | "UNSUPPORTED" will be set. |
diff --git a/src/gnutls_hooks.c b/src/gnutls_hooks.c index c1a1c52..1af82a7 100644 --- a/src/gnutls_hooks.c +++ b/src/gnutls_hooks.c | |||
@@ -891,19 +891,19 @@ mgs_add_common_cert_vars(request_rec * r, gnutls_x509_crt cert, int side, | |||
891 | 891 | ||
892 | if (ret == GNUTLS_SAN_DNSNAME) { | 892 | if (ret == GNUTLS_SAN_DNSNAME) { |
893 | apr_table_setn(env, | 893 | apr_table_setn(env, |
894 | apr_psprintf(r->pool, "%s_SAN%u", MGS_SIDE, i), | 894 | apr_psprintf(r->pool, "%s_S_SAN%u", MGS_SIDE, i), |
895 | apr_psprintf(r->pool, "DNSNAME:%s", tmp2)); | 895 | apr_psprintf(r->pool, "DNSNAME:%s", tmp2)); |
896 | } else if (ret == GNUTLS_SAN_RFC822NAME) { | 896 | } else if (ret == GNUTLS_SAN_RFC822NAME) { |
897 | apr_table_setn(env, | 897 | apr_table_setn(env, |
898 | apr_psprintf(r->pool, "%s_SAN%u", MGS_SIDE, i), | 898 | apr_psprintf(r->pool, "%s_S_SAN%u", MGS_SIDE, i), |
899 | apr_psprintf(r->pool, "RFC822NAME:%s", tmp2)); | 899 | apr_psprintf(r->pool, "RFC822NAME:%s", tmp2)); |
900 | } else if (ret == GNUTLS_SAN_URI) { | 900 | } else if (ret == GNUTLS_SAN_URI) { |
901 | apr_table_setn(env, | 901 | apr_table_setn(env, |
902 | apr_psprintf(r->pool, "%s_SAN%u", MGS_SIDE, i), | 902 | apr_psprintf(r->pool, "%s_S_SAN%u", MGS_SIDE, i), |
903 | apr_psprintf(r->pool, "URI:%s", tmp2)); | 903 | apr_psprintf(r->pool, "URI:%s", tmp2)); |
904 | } else { | 904 | } else { |
905 | apr_table_setn(env, | 905 | apr_table_setn(env, |
906 | apr_psprintf(r->pool, "%s_SAN%u", MGS_SIDE, i), | 906 | apr_psprintf(r->pool, "%s_S_SAN%u", MGS_SIDE, i), |
907 | "UNSUPPORTED"); | 907 | "UNSUPPORTED"); |
908 | } | 908 | } |
909 | } | 909 | } |