Merge pull request #122 from oracle/cel-fixes

chucklever · web-flow · commit 9b1a0c81166e · 2025-09-15T14:49:46.000-04:00
tlshd: Kernel should not parse incoming client certificates
diff --git a/src/tlshd/server.c b/src/tlshd/server.c
@@ -287,7 +287,7 @@ static int tlshd_server_x509_verify_function(gnutls_session_t session,
 			gnutls_x509_crt_deinit(cert);
 			return GNUTLS_E_CERTIFICATE_ERROR;
 		}
-		peerid = tlshd_keyring_create_cert(cert, parms->peername);
+		peerid = UINT_MAX;
 		g_array_append_val(parms->remote_peerids, peerid);
 		gnutls_x509_crt_deinit(cert);
 	}

Original file line number	Diff line number	Diff line change
`@@ -287,7 +287,7 @@ static int tlshd_server_x509_verify_function(gnutls_session_t session,`
`287`	`287`	`gnutls_x509_crt_deinit(cert);`
`288`	`288`	`return GNUTLS_E_CERTIFICATE_ERROR;`
`289`	`289`	`}`
`290`		`- peerid = tlshd_keyring_create_cert(cert, parms->peername);`
	`290`	`+ peerid = UINT_MAX;`
`291`	`291`	`g_array_append_val(parms->remote_peerids, peerid);`
`292`	`292`	`gnutls_x509_crt_deinit(cert);`
`293`	`293`	`}`