stv0g/re
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

tls_verify_cert(): check arguments and return value

Browse source
This commit is contained in:
Richard Aas 2011-09-06 11:49:19 +00:00
parent 410b9c4fe4
commit 0b50778c33
1 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/tls/openssl/tls.c
View file

@ -167,16 +167,20 @@ int tls_verify_cert(struct tls_conn *tc, char *cn, size_t cn_size)
{
X509 *peer;
if (!tc)
if (!tc || !cn || !cn_size)
return EINVAL;
/* Check the cert chain. The chain length
is automatically checked by OpenSSL when
we set the verify depth in the ctx */
/* Get the common name */
peer = SSL_get_peer_certificate(tc->ssl);
/* todo: check return value */
if (!peer) {
DEBUG_WARNING("Unable to get peer certificate\n");
return EPROTO;
}
/* Get the common name */
X509_NAME_get_text_by_NID(X509_get_subject_name(peer),
NID_commonName, cn, (int)cn_size);