Skip to content
  • Kaspar Brand's avatar
    Merge r1650047 from trunk: · 8a1c04de
    Kaspar Brand authored
    Add support for extracting subjectAltName entries of type
    rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n
    variables.
    
    * docs/manual/mod/mod_ssl.xml: add SSL_*_SAN_*_n entries to the
      environment variables table
    
    * modules/ssl/ssl_engine_kernel.c: in ssl_hook_Fixup, add extraction
      of subjectAltName entries for the "StdEnvVars" case
    
    * modules/ssl/ssl_engine_vars.c: add support for retrieving the
      SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n variables, either with
      individual on-demand lookup (ssl_var_lookup_ssl_cert_san),
      or with full-list extraction to the environment ("StdEnvVars")
    
    * modules/ssl/ssl_private.h: add modssl_var_extract_san_entries prototype
    
    * modules/ssl/ssl_util_ssl.c: implement SSL_X509_getSAN and
      SSL_ASN1_STRING_to_utf8 helper functions, with factoring out common
      code from SSL_X509_getIDs and SSL_X509_NAME_ENTRY_to_string where
      suitable. Limit SSL_X509_getSAN to the two most common subjectAltName
      entry types appearing in user or server certificates (i.e., rfc822Name
      and dNSName), for the time being.
    
    * modules/ssl/ssl_util_ssl.h: add SSL_ASN1_STRING_to_utf8
      and SSL_X509_getSAN prototypes
    
    
    Proposed by: kbrand
    Reviewed by: ylavic, druggeri
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1676087 13f79535-47bb-0310-9956-ffa450edef68
    8a1c04de
To find the state of this project's repository at the time of any of these versions, check out the tags.