File pkinit-nss-0.6.0-skip-domains.patch of Package pkinit-nss

Overview Repositories Revisions Requests Users Attributes Meta

File pkinit-nss-0.6.0-skip-domains.patch of Package pkinit-nss

--- pkinit-nss-0.6.0-1/src/certs.c~	2007-04-24 17:03:44.000000000 -0400
+++ pkinit-nss-0.6.0-1/src/certs.c	2007-05-23 15:19:53.000000000 -0400
@@ -611,12 +611,33 @@ cert_san_matches_upn(struct module_conte
 						pkinit_debug(mcontext, 2,
 							     "UPN Matched.\n");
 						*matches = PR_TRUE;
-                                        } else if (SECITEM_ItemsAreEqual (&ms_upn_name,
-                                                                          &unparsed_name_lower)) {
-                                                pkinit_debug(mcontext, 2,
-                                                             "UPN Matched (lower).\n");
-                                                *matches = PR_TRUE;
-					} else {
+                                        } else {
+                                                void *upn_at, *unparsed_at;
+                                                unsigned int upn_len, unparsed_len;
+
+                                                upn_at = memchr (ms_upn_name.data, '@', ms_upn_name.len);
+                                                unparsed_at = memchr (unparsed_name.data, '@', unparsed_name.len);
+
+                                                if (upn_at && unparsed_at) {
+                                                    upn_len = ms_upn_name.len;
+                                                    ms_upn_name.len = (unsigned char *)upn_at - ms_upn_name.data;
+                                                    
+                                                    unparsed_len = unparsed_name.len;
+                                                    unparsed_name.len = (unsigned char *)unparsed_at - unparsed_name.data;
+
+                                                    if (SECITEM_ItemsAreEqual(&ms_upn_name,
+                                                                              &unparsed_name)) {
+                                                        pkinit_debug(mcontext, 2,
+                                                                     "UPN Matched (ignoring after @).\n");
+                                                        *matches = PR_TRUE;
+                                                    }
+
+                                                    ms_upn_name.len = upn_len;
+                                                    unparsed_name.len = unparsed_len;
+                                                }
+					} 
+
+                                        if (!*matches) {
 						pkinit_debug(mcontext, 2,
 							     "\"%.*s\" != "
 							     "\"%.*s\"\n",

Places

File pkinit-nss-0.6.0-skip-domains.patch of Package pkinit-nss

Places