[nail-devel] Certificate verification bug

[Doug H. <Dou...@xs...>]

Hi;

  I've run across a small bug with certificate verification when using NSS. Verification should succeed if the certificate contains a matching DNS name but it is failing instead. The patch below seems to fix it nicely...

-Doug



Index: nss.c
===================================================================
RCS file: /cvsroot/nail/nail/nss.c,v
retrieving revision 1.18
diff -u -r1.18 nss.c
--- nss.c       4 Aug 2007 11:40:56 -0000       1.18
+++ nss.c       1 Apr 2015 16:47:55 -0000
@@ -192,6 +192,7 @@
                                if (rfc2595_hostname_match(server, dn)
                                                == OKAY) {
                                        ac_free(dn);
+                                       ok = OKAY;
                                        goto out;
                                }
                                ac_free(dn);
~