Changeset 41f7031 in mod_gnutls for src/gnutls_hooks.c

Timestamp:

Dec 2, 2007, 1:18:19 AM (13 years ago)

Author:

Nokis Mavrogiannopoulos <nmav@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, proxy-ticket, upstream

Children:

717206c

Parents:

9bb68fe

git-author:

Nikos Mavrogiannopoulos <nmav@…> (12/02/07 01:18:19)

git-committer:

Nokis Mavrogiannopoulos <nmav@…> (12/02/07 01:18:19)

Message:

some fixes in alternative name support

File:

• src/gnutls_hooks.c (modified) (3 diffs)

src/gnutls_hooks.c

@@ -223 +223 @@
                                        0, 0, NULL, &data_len);
 
-    if (rv >= 0 && data_len > 1) {
+    if (rv == GNUTLS_E_SHORT_MEMORY_BUFFER && data_len > 1) {
         *cert_cn = apr_palloc(p, data_len);
         rv = gnutls_x509_crt_get_dn_by_oid(cert,
-                                           GNUTLS_OID_X520_COMMON_NAME, 0,
-                                           0, *cert_cn, &data_len);
+                  GNUTLS_OID_X520_COMMON_NAME, 0, 0, *cert_cn, &data_len);
     } else {                    /* No CN return subject alternative name */
 
@@ -357 +356 @@
             if (sc->srp_tpasswd_conf_file != NULL
                 && sc->srp_tpasswd_file != NULL) {
-                gnutls_srp_set_server_credentials_file(sc->srp_creds,
-                                                       sc->
-                                                       srp_tpasswd_file,
-                                                       sc->
-                                                       srp_tpasswd_conf_file);
+                rv = gnutls_srp_set_server_credentials_file(sc->srp_creds,
+                       sc->srp_tpasswd_file, sc->srp_tpasswd_conf_file);
+                
+                if (rv < 0 && sc->enabled == GNUTLS_ENABLED_TRUE) {
+                  ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s,
+                             "[GnuTLS] - Host '%s:%d' is missing a "
+                             "SRP password or conf File!", s->server_hostname,
+                             s->port);
+                  exit(-1);
+                }
             }
 
@@ -385 +389 @@
                 rv = read_crt_cn(p, sc->cert_x509, &sc->cert_cn);
                 if (rv < 0) {
+                    ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s,
+                             "[GnuTLS] - Cannot find a certificate for host '%s:%d'! Disabling TLS.",
+                             s->server_hostname, s->port);
                     sc->enabled = GNUTLS_ENABLED_FALSE;
                     sc->cert_cn = NULL;