mainGnuTLS - Support: sr #106975, GnuTLS subjectAltName parsing is...

 
 

sr #106975: GnuTLS subjectAltName parsing is broken

Submitter:  Howard Chu <hyc>
Submitted:  Wed 12 Aug 2009 10:55:16 PM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  jas
Open/Closed:  Closed Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 01 Sep 2009 02:06:24 PM UTC, comment #3: 

Closing since it has been fixed.

Simon Josefsson <jas>
Group administrator
Mon 31 Aug 2009 07:06:22 PM UTC, comment #2: 

The patch wasn't correct, it causes callers to allocate a buffer that doesn't include the terminating NUL.  Using the certificate for testing, I was able to come up with a better patch.  See:

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=4c439e1cae52209bb74df9a091d04f85de2223de

Have been back-ported to 2.8.x as well.

/Simon

Simon Josefsson <jas>
Group administrator
Tue 18 Aug 2009 01:00:28 PM UTC, comment #1: 

Is there any example cert to reproduce this problem?

/Simon

Simon Josefsson <jas>
Group administrator
Wed 12 Aug 2009 10:55:16 PM UTC, original submission:  

This was reported as OpenLDAP ITS#6252. The bug is in GnuTLS's handling of XMPP SANs. The trivial fix is attached.


Howard Chu <hyc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #18598:  gen-ns-cert.pem added by hyc (2KiB - application/octet-stream - Cert and key)
file #18599:  gen-ns-key.pem added by hyc (2KiB - application/octet-stream - Cert and key)
file #18565:  0001-Fix-XMPP-parsing.patch added by hyc (669B - text/x-patch - Fix)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jas (Posted a comment)
  • -email is unavailable- added by hyc (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-09-01 jas Open/ClosedOpen Closed
    2009-08-31 jas StatusNeed Info Done
    2009-08-18 hyc Attached File- Added gen-ns-cert.pem, #18598
        Attached File- Added gen-ns-key.pem, #18599
    2009-08-18 jas StatusNone Need Info
        Assigned toNone jas
    2009-08-12 hyc Attached File- Added 0001-Fix-XMPP-parsing.patch, #18565

    Back to the top

    Powered by Savane 3.13-cf05.
    Corresponding source code