Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE
dovecot23.9674
0001-auth-Do-not-import-empty-certificate-usern...
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0001-auth-Do-not-import-empty-certificate-username.patch of Package dovecot23.9674
From d21218b416c7f26cb42a491bbd04bcd0d6a65b51 Mon Sep 17 00:00:00 2001 From: Aki Tuomi <aki.tuomi@open-xchange.com> Date: Wed, 16 Jan 2019 18:28:57 +0200 Subject: [PATCH 1/3] auth: Do not import empty certificate username --- src/auth/auth-request.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/auth/auth-request.c b/src/auth/auth-request.c index d383ba424..578f59ba7 100644 --- a/src/auth/auth-request.c +++ b/src/auth/auth-request.c @@ -453,7 +453,7 @@ bool auth_request_import_auth(struct auth_request *request, else if (strcmp(key, "valid-client-cert") == 0) request->valid_client_cert = TRUE; else if (strcmp(key, "cert_username") == 0) { - if (request->set->ssl_username_from_cert) { + if (request->set->ssl_username_from_cert && *value != '\0') { /* get username from SSL certificate. it overrides the username given by the auth mechanism. */ request->user = p_strdup(request->pool, value); -- 2.11.0
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
