Changeset b55bf71 in mod_gnutls

Timestamp:

Nov 16, 2013, 2:46:50 AM (6 years ago)

Author:

Daniel Kahn Gillmor <dkg@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

37b52ea

Parents:

a01f8ab

git-author:

Daniel Kahn Gillmor <dkg@…> (02/03/13 09:59:26)

git-committer:

Daniel Kahn Gillmor <dkg@…> (11/16/13 02:46:50)

Message:

accept the e-mail address in the cert Subject if no sAN e-mail is present

File:

• src/gnutls_hooks.c (modified) (1 diff)

src/gnutls_hooks.c

@@ -1467 +1467 @@
        This should be the the first rfc822Name from the sAN.
 
-   (MAYBE: leaf rfc822Name in the certificate's subject, but this is
-           deprecated, and i don't see the OID in x509.h; can we
-           support it?)
-
+       failing that, we'll take the leaf email in the certificate's
+       subject; this is a deprecated use though.
      */
     email = mgs_x509_first_type_from_san(sp, GNUTLS_SAN_RFC822NAME, cert);
-
+    if (email == NULL)
+        email = mgs_x509_leaf_oid_from_dn(sp, GNUTLS_OID_PKCS9_EMAIL, cert);
 
     /* assemble all the parts: */