Skip to content

Conversation

@shukitchan
Copy link
Contributor

@shukitchan shukitchan commented Nov 24, 2025

This pull request makes a minor update to the way SAN certificate names are extracted to improve safety and compatibility with newer OpenSSL APIs.

  • Security and compatibility improvement:
    • In print_san_certificate in ats_context.cc, replaces the deprecated ASN1_STRING_data with ASN1_STRING_get0_data and updates the pointer type to const char * for safer and more modern OpenSSL usage.

@shukitchan shukitchan self-assigned this Nov 24, 2025
@shukitchan shukitchan added this to the 10.2.0 milestone Nov 24, 2025
@shukitchan shukitchan marked this pull request as ready for review November 24, 2025 02:17
@shukitchan shukitchan requested a review from Copilot November 24, 2025 02:17
Copilot finished reviewing on behalf of shukitchan November 24, 2025 02:19
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR modernizes OpenSSL API usage in the WASM plugin by replacing a deprecated function with its recommended replacement, improving both safety and compatibility with newer OpenSSL versions.

Key Changes:

  • Replaces deprecated ASN1_STRING_data with ASN1_STRING_get0_data in certificate SAN name extraction
  • Updates pointer type from char * to const char * to preserve const-correctness

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant