Changeset 2ad3683 in mod_gnutls for src/gnutls_hooks.c

Timestamp:

Apr 24, 2005, 7:51:47 PM (15 years ago)

Author:

Paul Querna <chip@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, upstream

Children:

38435cc

Parents:

46e3920

Message:

We already have a Certificate, use it directly. With SNI, GnuTLS doesn't properly update it's internal state. ick.

File:

• src/gnutls_hooks.c (modified) (2 diffs)

src/gnutls_hooks.c

@@ -525 +525 @@
     int len;
     mgs_handle_t *ctxt;
-    int rv;
+    int rv = OK;
     
     apr_table_t *env = r->subprocess_env;
@@ -562 +562 @@
     /* TODO: There are many other env vars that we need to add */
     {
-        const gnutls_datum *certs;
-        gnutls_x509_crt cert;
-
-        certs = gnutls_certificate_get_ours(ctxt->session);
-        if (certs) {
-
-            rv = gnutls_x509_crt_init(&cert);
-            if (rv < 0) {
-                goto end_fixups;
-            }
-            
-            rv = gnutls_x509_crt_import(cert, &certs[0], GNUTLS_X509_FMT_DER);
-            if (rv < 0) {
-                gnutls_x509_crt_deinit(cert);
-                goto end_fixups;
-            }
-            
-            len = sizeof(buf);
-            gnutls_x509_crt_get_dn(cert, buf, &len);
-            apr_table_setn(env, "SSL_SERVER_S_DN", buf);
-            
-            len = sizeof(buf);
-            gnutls_x509_crt_get_issuer_dn(cert, buf, &len);
-            apr_table_setn(env, "SSL_SERVER_I_DN", buf);
-            
-            gnutls_x509_crt_deinit(cert);
-        }
-        else {
-            apr_table_setn(env, "SSL_SERVER_S_DN", "Unknown");
-            apr_table_setn(env, "SSL_SERVER_I_DN", "Unknown");
-        }
-    }
-    
-end_fixups:
-    return OK;
+        len = sizeof(buf);
+        gnutls_x509_crt_get_dn(ctxt->sc->cert_x509, buf, &len);
+        apr_table_setn(env, "SSL_SERVER_S_DN", buf);
+           
+        len = sizeof(buf);
+        gnutls_x509_crt_get_issuer_dn(ctxt->sc->cert_x509, buf, &len);
+        apr_table_setn(env, "SSL_SERVER_I_DN", buf);
+    }
+    
+    return rv;
 }