Changeset ee65fcb in mod_gnutls

Timestamp:

Dec 2, 2007, 4:05:52 AM (15 years ago)

Author:

Nokis Mavrogiannopoulos <nmav@…>

Branches:

asyncio, debian/master, debian/stretch-backports, jessie-backports, main, master, msva, proxy-ticket, upstream

Children:

a5dc815

Parents:

717206c

git-author:

Nikos Mavrogiannopoulos <nmav@…> (12/02/07 04:05:52)

git-committer:

Nokis Mavrogiannopoulos <nmav@…> (12/02/07 04:05:52)

Message:

added SSL_SERVER_M_SERIAL environment variable

Files:

• README.ENV (modified) (2 diffs)
• src/gnutls_hooks.c (modified) (1 diff)

README.ENV

@@ -8 +8 @@
 SSL_COMPRESS_METHOD: The negotiated compression method (NULL or DEFLATE)
 SSL_SRP_USER: The SRP username used for authentication.
-SSL_CLIENT_VERIFY: 
-  whether the client's certificate was verified. (NONE if none was sent, or SUCCESS or FAILED)
 SSL_CIPHER_USEKEYSIZE and SSL_CIPHER_ALGKEYSIZE: The number if bits used in the used cipher
   algorithm. This does not fully reflect the security level since the size of 
@@ -16 +14 @@
 SSL_SESSION_ID: The session ID negotiated in this session. Can be the same during
   client reloads.
+
 SSL_CLIENT_V_REMAIN: The number of days until the client's certificate is expired.
+SSL_CLIENT_V_START: The activation time of client's certificate.
+SSL_CLIENT_V_END: The expiration time of client's certificate.
+SSL_CLIENT_S_DN: The distinguished name of client's certificate in RFC2253 format.
+SSL_CLIENT_I_DN: The distinguished name of client's issuer certificate in RFC2253 format.
+SSL_CLIENT_M_SERIAL: The serial number of the client's certificate.
+SSL_CLIENT_M_VERSION: The version of the client's certificate.
+SSL_CLIENT_A_SIG: The algorithm used for the signature in client's certificate.
+SSL_CLIENT_A_KEY: The public key algorithm in client's certificate.
+SSL_CLIENT_CERT: The PEM-encoded client certificate
+SSL_CLIENT_VERIFY: 
+  whether the client's certificate was verified. (NONE if none was sent, or SUCCESS or FAILED)
 
-SSL_CLIENT_CERT: The PEM-encoded client certificate
+SSL_SERVER_V_START: The activation time of server's certificate.
+SSL_SERVER_V_END: The expiration time of server's certificate.
+SSL_SERVER_S_DN: The distinguished name of the server's certificate in RFC2253 format.
+SSL_SERVER_I_DN: The distinguished name of the server's issuer certificate in RFC2253 format.
+SSL_SERVER_M_SERIAL: The serial number of the server's certificate.
+SSL_SERVER_M_VERSION: The version of the server's certificate.
+SSL_SERVER_A_SIG: The algorithm used for the signature in server's certificate.
+SSL_SERVER_A_KEY: The public key algorithm in server's certificate.
+
 SSL_SERVER_CERT: The PEM-encoded server certificate

src/gnutls_hooks.c

@@ -835 +835 @@
                    apr_pstrdup(r->pool, tmp));
 
+    alg = gnutls_x509_crt_get_version(cert);
+    if (alg > 0)
+      apr_table_setn(env, apr_pstrcat(r->pool, MGS_SIDE, "_M_VERSION", NULL),
+                   apr_psprintf(r->pool, "%u", alg));
+
     tmp =
         mgs_time2sz(gnutls_x509_crt_get_expiration_time