cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: bug in 'mk-ca-bundle' script

From: <starlight.2012q3_at_binnacle.cx>
Date: Tue, 04 Sep 2012 11:11:43 -0400

At 04:58 PM 9/4/2012 +0200, Daniel Stenberg wrote:
>On Tue, 4 Sep 2012, starlight.2012q3_at_binnacle.cx wrote:
>If you truly mean that, can you please make a patch
>against the latest version and show us?

Sorry but I'm suffering from certificate
and perl hacking fatigue. Maybe in a
few weeks.

In english, the problem is that the original
does not take in to account the separate
certificate and trust sections which
both have UTF8 names--it blurs them
together and mixes up the attributes
from two different certificates.

The fix is to trigger off the
certificate start line and capture
the first name and value block.
Then disable capturing at the end
of the cert while still looking for
NOT_TRUSTED attributes. Then
emitting the cert when the end
of the trust section is found.

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-09-04