From 9dc4d874c743def8c77af20ecc060e74c3009ca4 Mon Sep 17 00:00:00 2001 From: me_desk Date: Sat, 11 Aug 2012 03:05:26 +0000 Subject: client certificate with user id == 0 is considered invalid from now, for error detection purposes (like a NULL pointer) git-svn-id: svn://localhost/project_picapica/trunk@159 fb96df88-216d-11de-830c-f3023f12d8ac --- PICA_node.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'PICA_node.c') diff --git a/PICA_node.c b/PICA_node.c index 27b7e40..97d1fe2 100755 --- a/PICA_node.c +++ b/PICA_node.c @@ -2049,7 +2049,7 @@ while(i_ptr) X509* client_cert; char* DN_str; - printf("SSL connection using %s\n", SSL_get_cipher(i_ptr->ssl_comm));//debug + PICA_info("SSL c2n connection established using %s cipher", SSL_get_cipher(i_ptr->ssl_comm)); client_cert=SSL_get_peer_certificate (i_ptr->ssl_comm); if (!client_cert) @@ -2065,9 +2065,9 @@ while(i_ptr) kill_ptr=i_ptr; } ret=get_id_fromsubjstr(DN_str,&i_ptr->id); - if (!ret) + if (!ret || i_ptr-id == 0) { - //ERR_CHECK //ошибка выделения id + PICA_error("Unable to get client id from certificate, or certificate is invalid"); kill_ptr=i_ptr; } printf("user id=%u\n",i_ptr->id);//debug -- cgit v1.2.1