File 0591-allowed-3-letters-country-code-to-be-valid... of Package erlang

Overview Repositories Revisions Requests Users Attributes Meta

File 0591-allowed-3-letters-country-code-to-be-valid.patch of Package erlang

From 48d6243d8a45d711ce4a861a45e5992294fdbb80 Mon Sep 17 00:00:00 2001
From: Denis Baranov <denis@adjust.com>
Date: Wed, 27 Feb 2019 10:33:42 +0100
Subject: [PATCH] allowed 3 letters country code to be valid

Some certificate issuers like Apple use USA instead of US as a country
name. This makes handshake with a server not possible as this considered
as not valid certificate. This commit eases that requirement to allow
both 2 and 3 letters country names.
---
 lib/public_key/asn1/OTP-PKIX.asn1 | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/lib/public_key/asn1/OTP-PKIX.asn1 b/lib/public_key/asn1/OTP-PKIX.asn1
index 9bcd99fba3..ff3250b383 100644
--- a/lib/public_key/asn1/OTP-PKIX.asn1
+++ b/lib/public_key/asn1/OTP-PKIX.asn1
@@ -233,9 +233,13 @@ countryName ATTRIBUTE-TYPE-AND-VALUE-CLASS ::= {
  -- regarding how to handle and sometimes accept incorrect certificates
  -- we define and use the type below instead of X520countryName
 
+ -- We accept utf8String encoding of the US-ASCII
+ -- country name code and the mix up with other country code systems
+ -- that uses three characters instead of two.
+
  OTP-X520countryname ::= CHOICE {
-       printableString   PrintableString (SIZE (2)),
-       utf8String        UTF8String      (SIZE (2))
+       printableString   PrintableString (SIZE (2..3)),
+       utf8String        UTF8String      (SIZE (2..3))
 }
 
 serialNumber ATTRIBUTE-TYPE-AND-VALUE-CLASS ::= {
-- 
2.16.4

Places

File 0591-allowed-3-letters-country-code-to-be-valid.patch of Package erlang

Places