Author: mcalmer Date: Thu Sep 8 16:35:07 2011 New Revision: 65615 URL: http://svn.opensuse.org/viewcvs/yast?rev=65615&view=rev Log: - version 2.17.20 - check subject alt name when exporting as common server cert (bnc#716673) Modified: branches/SuSE-Code-11-SP2-Branch/ca-management/VERSION branches/SuSE-Code-11-SP2-Branch/ca-management/package/yast2-ca-management.changes branches/SuSE-Code-11-SP2-Branch/ca-management/src/util.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ca-management/VERSION URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ca-management/VERSION?rev=65615&r1=65614&r2=65615&view=diff ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ca-management/VERSION (original) +++ branches/SuSE-Code-11-SP2-Branch/ca-management/VERSION Thu Sep 8 16:35:07 2011 @@ -1 +1 @@ -2.17.19 +2.17.20 Modified: branches/SuSE-Code-11-SP2-Branch/ca-management/package/yast2-ca-management.changes URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ca-management/package/yast2-ca-management.changes?rev=65615&r1=65614&r2=65615&view=diff ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ca-management/package/yast2-ca-management.changes (original) +++ branches/SuSE-Code-11-SP2-Branch/ca-management/package/yast2-ca-management.changes Thu Sep 8 16:35:07 2011 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Thu Sep 8 16:32:17 CEST 2011 - mc@suse.de + +- version 2.17.20 +- check subject alt name when exporting as common server cert + (bnc#716673) + +------------------------------------------------------------------- Tue Jun 7 12:45:57 UTC 2011 - jreidinger@novell.com - version 2.17.19 Modified: branches/SuSE-Code-11-SP2-Branch/ca-management/src/util.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ca-management/src/util.ycp?rev=65615&r1=65614&r2=65615&view=diff ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ca-management/src/util.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ca-management/src/util.ycp Thu Sep 8 16:35:07 2011 @@ -1169,13 +1169,28 @@ y2milestone("Hostname :%1", retmap); if (commonName != strip(retmap["stdout"]:"")) { - string errorString = sformat ( _("The common name of the certificate (%1) is not the name of + // check if hostname is in Subject Alt Name + map ret = (map) YaPI::CaManagement::ReadCertificate ($["caName":CAname, + "caPasswd":getPassword(CAname), + "certificate":certificate, + "type":"parsed"]); + map opensslExtentions = ret["OPENSSL_EXTENSIONS"]:$[]; + boolean found = false; + foreach (string entry, (list<string>) opensslExtentions["X509v3 Subject Alternative Name"]:[], ``{ + if (issubstring(entry, strip(retmap["stdout"]:""))) { + y2milestone("Found hostname(%1) in Subject Alternative Name (%2)", strip(retmap["stdout"]:""), entry) + found = true; + } + }); + if (!found) { + string errorString = sformat ( _("The common name of the certificate (%1) is not the name of the server (%2). This certificate might be not practical as a common server certificate. "), commonName, strip(retmap["stdout"]:"")); - Popup::Warning (errorString); + Popup::Warning (errorString); + } } UI::OpenDialog (`opt(`decorated ), -- To unsubscribe, e-mail: yast-commit+unsubscribe@opensuse.org For additional commands, e-mail: yast-commit+help@opensuse.org