www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-07 04:02:58 +03:00
Code Activity

* modules/ssl/ssl_engine_log.c (ssl_log_cxerror): Log the certificate

Browse Source 
serial number along with the subject and issuer names.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@598690 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Joe Orton
2007-11-27 16:57:12 +00:00
parent 0a8ef36714
commit 14fcf5a1bc
1 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
modules/ssl/ssl_engine_log.c
View File

@@ -114,7 +114,8 @@ void ssl_log_cxerror(const char *file, int line, int level,
{ {
va_list ap; va_list ap;
char buf[HUGE_STRING_LEN]; char buf[HUGE_STRING_LEN];
char *sname, *iname; char *sname, *iname, *serial;
BIGNUM *bn;
if (c->base_server->loglevel < level) { if (c->base_server->loglevel < level) {
/* Bail early since the rest of this function is expensive. */ /* Bail early since the rest of this function is expensive. */
@@ -123,16 +124,19 @@ void ssl_log_cxerror(const char *file, int line, int level,
sname = X509_NAME_oneline(X509_get_subject_name(cert), NULL, 0); sname = X509_NAME_oneline(X509_get_subject_name(cert), NULL, 0);
iname = X509_NAME_oneline(X509_get_issuer_name(cert), NULL, 0); iname = X509_NAME_oneline(X509_get_issuer_name(cert), NULL, 0);
bn = ASN1_INTEGER_to_BN(X509_get_serialNumber(cert), NULL);
serial = bn && !BN_is_zero(bn) ? BN_bn2hex(bn) : NULL;
va_start(ap, format); va_start(ap, format);
apr_vsnprintf(buf, sizeof buf, format, ap); apr_vsnprintf(buf, sizeof buf, format, ap);
va_end(ap); va_end(ap);
ap_log_cerror(file, line, level, rv, c, ap_log_cerror(file, line, level, rv, c,
"%s [peer subject: %s, issuer: %s]", "%s [peer subject: %s, issuer: %s, serial: %s]",
buf, buf,
sname ? sname : "-unknown-", sname ? sname : "-unknown-",
iname ? iname : "-unknown-"); iname ? iname : "-unknown-",
serial ? serial : "-unknown-");
if (sname) { if (sname) {
modssl_free(sname); modssl_free(sname);
@@ -141,4 +145,12 @@ void ssl_log_cxerror(const char *file, int line, int level,
if (iname) { if (iname) {
modssl_free(iname); modssl_free(iname);
} }
if (serial) {
modssl_free(serial);
}
if (bn) {
BN_free(bn);
}
} }