pidgin: 2d7b7fd4: x509_issuer_dn() should return the certi...

nosnilmot at pidgin.im nosnilmot at pidgin.im
Sat Nov 1 12:30:37 EDT 2008


-----------------------------------------------------------------
Revision: 2d7b7fd48672dee61014320193378c732c033bc2
Ancestor: d5e8d63bd0bb69016447e0b053ea96ead0f57504
Author: nosnilmot at pidgin.im
Date: 2008-11-01T16:24:56
Branch: im.pidgin.pidgin
URL: http://d.pidgin.im/viewmtn/revision/info/2d7b7fd48672dee61014320193378c732c033bc2

Modified files:
        libpurple/plugins/ssl/ssl-nss.c

ChangeLog: 

x509_issuer_dn() should return the certificate's issuer name, not the cert
subject name. This fixes verifying CA certs that are not included by the
server if the chain if it is a one-level chain and we trust the CA.
Fixes #7418

-------------- next part --------------
============================================================
--- libpurple/plugins/ssl/ssl-nss.c	39e19a3039e0ccb427bf19f29d4b25f1a86331d6
+++ libpurple/plugins/ssl/ssl-nss.c	54d9228e9319318b825b3aa486075d372e8cc8aa
@@ -757,7 +757,7 @@ x509_issuer_dn (PurpleCertificate *crt)
 	crt_dat = X509_NSS_DATA(crt);
 	g_return_val_if_fail(crt_dat, NULL);
 
-	return g_strdup(crt_dat->subjectName);
+	return g_strdup(crt_dat->issuerName);
 }
 
 static gchar *


More information about the Commits mailing list