diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2021-06-19 00:42:28 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2021-07-20 09:36:06 +0200 |
| commit | 5ea3145850ebff1dc2b13d17440300a01ca38161 (patch) | |
| tree | 80fd0d0fcb9fcb370e980158a7c1cce4fd7b4c1d /lib/urldata.h | |
| parent | fd9b40bf8dfd43edcbc0d254d613d95a11061c05 (diff) | |
| download | curl-5ea3145850ebff1dc2b13d17440300a01ca38161.tar.gz | |
vtls: fix connection reuse checks for issuer cert and case sensitivity
CVE-2021-22924
Reported-by: Harry Sintonen
Bug: https://curl.se/docs/CVE-2021-22924.html
Diffstat (limited to 'lib/urldata.h')
| -rw-r--r-- | lib/urldata.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/urldata.h b/lib/urldata.h index 29aa3928d..1d9911208 100644 --- a/lib/urldata.h +++ b/lib/urldata.h @@ -246,6 +246,7 @@ struct ssl_primary_config { long version_max; /* max supported version the client wants to use*/ char *CApath; /* certificate dir (doesn't work on windows) */ char *CAfile; /* certificate to verify peer against */ + char *issuercert; /* optional issuer certificate filename */ char *clientcert; char *random_file; /* path to file containing "random" data */ char *egdsocket; /* path to file containing the EGD daemon socket */ @@ -254,6 +255,7 @@ struct ssl_primary_config { char *pinned_key; struct curl_blob *cert_blob; struct curl_blob *ca_info_blob; + struct curl_blob *issuercert_blob; char *curves; /* list of curves to use */ BIT(verifypeer); /* set TRUE if this is desired */ BIT(verifyhost); /* set TRUE if CN/SAN must match hostname */ @@ -265,8 +267,6 @@ struct ssl_config_data { struct ssl_primary_config primary; long certverifyresult; /* result from the certificate verification */ char *CRLfile; /* CRL to check certificate revocation */ - char *issuercert;/* optional issuer certificate filename */ - struct curl_blob *issuercert_blob; curl_ssl_ctx_callback fsslctx; /* function to initialize ssl ctx */ void *fsslctxp; /* parameter for call back */ char *cert_type; /* format for certificate (default: PEM)*/ |