]> git.kaiwu.me - nginx.git/commitdiff
SSL: fixed subjectAltName and commonName debug logging.
authorMaxim Dounin <mdounin@mdounin.ru>
Thu, 21 Aug 2025 01:40:59 +0000 (04:40 +0300)
committerEugene <54681898+jimf5@users.noreply.github.com>
Thu, 24 Sep 2026 19:33:26 +0000 (12:33 -0700)
Previously, ASN1_STRING_length() was used as a length for "%*s" format
specifier, which is wrong, since string length is expected to be "size_t",
and ASN1_STRING_length() returns "int".

Origin: <https://freenginx.org/hg/nginx/rev/a540fac7e04a>
Signed-off-by: Eugene Grebenschikov <e.grebenshchikov@f5.com>
src/event/ngx_event_openssl.c

index c827b996f5970599c5cda7d8838f02bdfd29565c..b6d4198469949154bbeeb3df19a1825ab860e85a 100644 (file)
@@ -5369,7 +5369,8 @@ ngx_ssl_check_host(ngx_connection_t *c, ngx_str_t *name)
 
             ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0,
                            "SSL subjectAltName: \"%*s\"",
-                           ASN1_STRING_length(str), ASN1_STRING_data(str));
+                           (size_t) ASN1_STRING_length(str),
+                           ASN1_STRING_data(str));
 
             if (ngx_ssl_check_name(name, str) == NGX_OK) {
                 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,
@@ -5411,7 +5412,8 @@ ngx_ssl_check_host(ngx_connection_t *c, ngx_str_t *name)
 
         ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0,
                        "SSL commonName: \"%*s\"",
-                       ASN1_STRING_length(str), ASN1_STRING_data(str));
+                       (size_t) ASN1_STRING_length(str),
+                       ASN1_STRING_data(str));
 
         if (ngx_ssl_check_name(name, str) == NGX_OK) {
             ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,