Massimiliano Pala wrote:
> 
> Hi,
> 
> I found 2 bugs in the previous patch, so here them are the fixes against
> latest SNAP (20011026).
> 
> Poblems:
> 
>         1. the dn_subject structure was not freed at the end of
>            the do_body function;
> 
>         2. the dn_subject was not set (empty) if email_dn was set to 1.
>            This caused the entry in the index.txt file to report null DN
>            set.
> 
> To apply the patchm simply copy it into the openssl/apps dir and do the
> following:
> 
>         $ patch <ca.c.fix-20011026
> 
> This will fix the bugs listed.
> 

Thanks,

I noticed these when I was attempting a different patch. I think the fix
I've done is functionally equivalent to your patch, except it doesn't
delete the email_dn option from do_subject() which I'll commit
separately.

Also I've deleted emailAddress from the DN in a different way: dup the
name then delete and emailAddress entries, this should retain the
X509_NAME structure in the event of multi values AVAs being used.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to