Skip to content
  • Joe Orton's avatar
    41f59653
    Backport from HEAD: · 41f59653
    Joe Orton authored
      * modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix buffer
      overflow in FakeBasicAuth code if client's subject DN exceeds 6K in
      length (CVE CAN-2004-0488); switch to using apr-util base64 encoder
      functions.
    
      * modules/ssl/ssl_engine_init.c (ssl_init_Engine): Log the OpenSSL
      error stack contents if engine load/init fails.
    
      * modules/ssl/ssl_engine_log.c (ssl_log_ssl_error): Use %lu to print
      an unsigned long.
    
      * modules/ssl/ssl_engine_log.c (ssl_log_annotate, ssl_log_annotation,
      ssl_log_ssl_error): const-ify annotation strings and simplify
      ssl_log_annotation.
    
    Reviewed by: Andr�� Malo, Jeff Trawick
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/APACHE_2_0_BRANCH@103867 13f79535-47bb-0310-9956-ffa450edef68
    41f59653
    Backport from HEAD:
    Joe Orton authored
      * modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix buffer
      overflow in FakeBasicAuth code if client's subject DN exceeds 6K in
      length (CVE CAN-2004-0488); switch to using apr-util base64 encoder
      functions.
    
      * modules/ssl/ssl_engine_init.c (ssl_init_Engine): Log the OpenSSL
      error stack contents if engine load/init fails.
    
      * modules/ssl/ssl_engine_log.c (ssl_log_ssl_error): Use %lu to print
      an unsigned long.
    
      * modules/ssl/ssl_engine_log.c (ssl_log_annotate, ssl_log_annotation,
      ssl_log_ssl_error): const-ify annotation strings and simplify
      ssl_log_annotation.
    
    Reviewed by: Andr�� Malo, Jeff Trawick
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/APACHE_2_0_BRANCH@103867 13f79535-47bb-0310-9956-ffa450edef68
To find the state of this project's repository at the time of any of these versions, check out the tags.
Loading