From 20371c3eae38f81848e51e53b59ca8947f372a47 Mon Sep 17 00:00:00 2001 From: Pierangelo Masarati Date: Mon, 3 Aug 2009 14:07:49 +0000 Subject: [PATCH] note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList --- servers/slapd/schema_init.c | 1 + 1 file changed, 1 insertion(+) diff --git a/servers/slapd/schema_init.c b/servers/slapd/schema_init.c index 253cf9790e..95d108f6a5 100644 --- a/servers/slapd/schema_init.c +++ b/servers/slapd/schema_init.c @@ -337,6 +337,7 @@ certificateListValidate( Syntax *syntax, struct berval *in ) ber_skip_data( ber, len ); tag = ber_skip_tag( ber, &len ); /* Must be at end now */ + /* NOTE: OpenSSL tolerates CL with garbage past the end */ if ( len || tag != LBER_DEFAULT ) return LDAP_INVALID_SYNTAX; return LDAP_SUCCESS; } -- 2.39.5