On Thu, Mar 22, 2001, Martin Kraemer wrote:
> The appended patch fixes the (on EBCDIC-based machines) erroneous
> comparison between the configured ServerName (EBCDIC) and the Canonical
> Name from the certificate (extracted raw => ASCII).
>
> The effect of this bug was a warning during startup:
>
> [22/Mar/2001 12:55:17 00052] [warn] Init: (BCAMSR03.mch.fsc.net:443) RSA server
>certificate CommonName (CN) `<binary garbage>' does NOT match server name!?
>
> Martin
> --
> <[EMAIL PROTECTED]> | Fujitsu Siemens
> Fon: +49-89-636-46021, FAX: +49-89-636-41143 | 81730 Munich, Germany
> --- ssl_util_ssl.cx Mon Jan 1 11:49:05 2001
> +++ ssl_util_ssl.c Tue Nov 21 13:43:57 2000
> @@ -384,6 +384,9 @@
> *cppCN = ap_palloc(p, xsne->value->length+1);
> ap_cpystrn(*cppCN, (char *)xsne->value->data, xsne->value->length+1);
> (*cppCN)[xsne->value->length] = NUL;
> +#ifdef CHARSET_EBCDIC
> + ascii2ebcdic(*cppCN, *cppCN, strlen(*cppCN));
> +#endif
> return TRUE;
> }
> }
Committed for mod_ssl 2.8.2. Thanks for your feedback.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
