helpGnuTLS - Support: sr #106975, GnuTLS subjectAltName parsing is...

 
 

sr #106975: GnuTLS subjectAltName parsing is broken

Submitted by:  Howard Chu <hyc>
Submitted on:  Wed 12 Aug 2009 10:55:16 PM UTC  
 
Category: NonePriority: 5 - Normal
Severity: 3 - NormalStatus: Done
Privacy: PublicAssigned to: Simon Josefsson <jas>
Open/Closed: ClosedOperating System: None

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 01 Sep 2009 02:06:24 PM UTC, comment #3:

Closing since it has been fixed.

Simon Josefsson <jas>
Project AdministratorIn charge of this item.
Mon 31 Aug 2009 07:06:22 PM UTC, comment #2:

The patch wasn't correct, it causes callers to allocate a buffer that doesn't include the terminating NUL. Using the certificate for testing, I was able to come up with a better patch. See:

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=4c439e1cae52209bb74df9a091d04f85de2223de

Have been back-ported to 2.8.x as well.

/Simon

Simon Josefsson <jas>
Project AdministratorIn charge of this item.
Tue 18 Aug 2009 01:00:28 PM UTC, comment #1:

Is there any example cert to reproduce this problem?

/Simon

Simon Josefsson <jas>
Project AdministratorIn charge of this item.
Wed 12 Aug 2009 10:55:16 PM UTC, original submission:

This was reported as OpenLDAP ITS#6252. The bug is in GnuTLS's handling of XMPP SANs. The trivial fix is attached.

Howard Chu <hyc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #18598:  gen-ns-cert.pem added by hyc (2kB - application/octet-stream - Cert and key)
file #18599:  gen-ns-key.pem added by hyc (2kB - application/octet-stream - Cert and key)
file #18565:  0001-Fix-XMPP-parsing.patch added by hyc (669B - text/x-patch - Fix)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by jas (Posted a comment)
  • -unavailable- added by hyc (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 7 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 01 Sep 2009 02:06:24 PM UTCjasOpen/ClosedOpen=>Closed
    Mon 31 Aug 2009 07:06:22 PM UTCjasStatusNeed Info=>Done
    Tue 18 Aug 2009 04:42:18 PM UTChycAttached File-=>Added gen-ns-cert.pem, #18598
      Attached File-=>Added gen-ns-key.pem, #18599
    Tue 18 Aug 2009 01:00:28 PM UTCjasStatusNone=>Need Info
      Assigned toNone=>jas
    Wed 12 Aug 2009 10:55:16 PM UTChycAttached File-=>Added 0001-Fix-XMPP-parsing.patch, #18565

    Back to the top


    Powered by Savane 3.1-cleanup