Pre-Submission Checklist

Commit message has the format required by CONTRIBUTING guide
Commits are split per component (core, individual modules, libs, utils, ...)
Each component has a single commit (if not, squash them into one commit)
No commits to README files for modules (changes must be done to docbook files
in doc/ subfolder, the README file is autogenerated)

Type Of Change

[ ] Small bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds new functionality)
Breaking change (fix or feature that would change existing functionality)

Checklist:

PR should be backported to stable branches
Tested changes locally
Related to issue #3168

Description

Certificate serial numbers can be large integers (> 2^64). Parse then as BIGNUM and store the string
in pv; we cannot store as integer anymore. The original code handles 2^64 with a static buffer of 19.
We upsize to 2^256 with a static buffer of 80.

May break configurations that try to extract the sn pv as an integer (does anyone actually do this?)

Addresses #3168.

You can view, comment on, or merge this pull request online at:

https://github.com/kamailio/kamailio/pull/3171

Commit Summary

02cb6fc tls: cert serial number can exceed uint64

File Changes

(1 file)

M src/modules/tls/tls_select.c (24)

Patch Links:

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.