mirror/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2026-04-20 15:25:33 +02:00
Code Issues Projects Releases Packages Wiki Activity

Bug #18384260: MULTIPLE SECURITY ISSUES IN CERTIFICATE VALIDATION

Browse source 
the 5.5 version of the fix.
Added a call to X509_verify_cert_error_string() into the client certificate
verification code.
This commit is contained in:
Georgi Kodinov 2014-07-31 12:52:49 +03:00
commit 229cb8ec88
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
sql-common/client.c
View file

@ -1909,6 +1909,12 @@ static int ssl_verify_server_cert(Vio *vio, const char* server_hostname, const c
DBUG_RETURN(1);
}
if (X509_V_OK != SSL_get_verify_result(ssl))
{
*errptr= "Failed to verify the server certificate";
X509_free(server_cert);
DBUG_RETURN(1);
}
/*
We already know that the certificate exchanged was valid; the SSL library
handled that. Now we need to verify that the contents of the certificate