helpGnuTLS - Support: sr #106975, GnuTLS subjectAltName parsing is...

 
 

sr #106975: GnuTLS subjectAltName parsing is broken

Submitted by:  Howard Chu <hyc>
Submitted on:  Wed 12 Aug 2009 10:55:16 PM UTC  
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  Simon Josefsson <jas>
Open/Closed:  Closed Operating System:  None

Add a New Comment (Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 01 Sep 2009 02:06:24 PM UTC, comment #3: 

Closing since it has been fixed.

Simon Josefsson <jas>
Project AdministratorIn charge of this item.
Mon 31 Aug 2009 07:06:22 PM UTC, comment #2: 

The patch wasn't correct, it causes callers to allocate a buffer that doesn't include the terminating NUL.  Using the certificate for testing, I was able to come up with a better patch.  See:

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=4c439e1cae52209bb74df9a091d04f85de2223de

Have been back-ported to 2.8.x as well.

/Simon

Simon Josefsson <jas>
Project AdministratorIn charge of this item.
Tue 18 Aug 2009 01:00:28 PM UTC, comment #1: 

Is there any example cert to reproduce this problem?

/Simon

Simon Josefsson <jas>
Project AdministratorIn charge of this item.
Wed 12 Aug 2009 10:55:16 PM UTC, original submission:  

This was reported as OpenLDAP ITS#6252. The bug is in GnuTLS's handling of XMPP SANs. The trivial fix is attached.

Howard Chu <hyc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #18598:  gen-ns-cert.pem added by hyc (2KiB - application/octet-stream - Cert and key)
file #18599:  gen-ns-key.pem added by hyc (2KiB - application/octet-stream - Cert and key)
file #18565:  0001-Fix-XMPP-parsing.patch added by hyc (669B - text/x-patch - Fix)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jas (Posted a comment)
  • -email is unavailable- added by hyc (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-09-01 jas Open/ClosedOpen => Closed
    2009-08-31 jas StatusNeed Info => Done
    2009-08-18 hyc Attached File- => Added gen-ns-cert.pem, #18598
        Attached File- => Added gen-ns-key.pem, #18599
    2009-08-18 jas StatusNone => Need Info
        Assigned toNone => jas
    2009-08-12 hyc Attached File- => Added 0001-Fix-XMPP-parsing.patch, #18565

    Back to the top


    Powered by Savane 3.6