From: Maxim Dounin Date: Thu, 21 Aug 2025 01:40:59 +0000 (+0300) Subject: SSL: fixed subjectAltName and commonName debug logging. X-Git-Tag: release-1.31.7~21 X-Git-Url: https://git.kaiwu.me/?a=commitdiff_plain;h=0831b97e722be322c4bb18bcdbe7610ba98f569e;p=nginx.git SSL: fixed subjectAltName and commonName debug logging. Previously, ASN1_STRING_length() was used as a length for "%*s" format specifier, which is wrong, since string length is expected to be "size_t", and ASN1_STRING_length() returns "int". Origin: Signed-off-by: Eugene Grebenschikov --- diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index c827b996f..b6d419846 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -5369,7 +5369,8 @@ ngx_ssl_check_host(ngx_connection_t *c, ngx_str_t *name) ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL subjectAltName: \"%*s\"", - ASN1_STRING_length(str), ASN1_STRING_data(str)); + (size_t) ASN1_STRING_length(str), + ASN1_STRING_data(str)); if (ngx_ssl_check_name(name, str) == NGX_OK) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, @@ -5411,7 +5412,8 @@ ngx_ssl_check_host(ngx_connection_t *c, ngx_str_t *name) ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL commonName: \"%*s\"", - ASN1_STRING_length(str), ASN1_STRING_data(str)); + (size_t) ASN1_STRING_length(str), + ASN1_STRING_data(str)); if (ngx_ssl_check_name(name, str) == NGX_OK) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,