[Issues] [mod_gnutls 0000092]: could 'SSL_SRP_USER' be string not Null ?

Mantis Bug Tracker issues at outoforder.cc
Mon Jul 5 03:18:39 EDT 2010


The following issue has been CLOSED 
====================================================================== 
http://issues.outoforder.cc/view.php?id=92 
====================================================================== 
Reported By:                znalo
Assigned To:                nmav
====================================================================== 
Project:                    mod_gnutls
Issue ID:                   92
Category:                   Apache Integration
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     closed
Apache Version:             2.2.9 (Debian Lenny) 
Resolution:                 fixed
Fixed in Version:           -TRUNK
====================================================================== 
Date Submitted:             2008-11-02 21:48 EST
Last Modified:              2010-07-05 03:18 EDT
====================================================================== 
Summary:                    could 'SSL_SRP_USER' be string not Null ?
Description: 
I'm not actually interested in using SRP but the environment variable
problem prevents use of Django via ModPython (for SNI).

What I am wondering is would it be acceptable for SSL_SRP_USER to be set
to a blank string instead of a Null?

[Product Version should be 0.5.1 unavailable in dropdown]
====================================================================== 

---------------------------------------------------------------------- 
 (0000132) znalo (reporter) - 2008-11-03 01:15
 http://issues.outoforder.cc/view.php?id=92#c132 
---------------------------------------------------------------------- 
i see in
http://svn.outoforder.cc/chora/co.php/trunk/src/gnutls_hooks.c?r=400 :

"""

#ifdef ENABLE_SRP
    apr_table_setn(env, "SSL_SRP_USER",
		   gnutls_srp_server_get_username(ctxt->session));
#endif

    if (apr_table_get(env, "SSL_CLIENT_VERIFY") == NULL)
	apr_table_setn(env, "SSL_CLIENT_VERIFY", "NONE");

"""

The question is would a similar treatment of turning a Null to a string be
appropriate for SRP? 

---------------------------------------------------------------------- 
 (0000158) nmav (manager) - 2009-06-30 14:14
 http://issues.outoforder.cc/view.php?id=92#c158 
---------------------------------------------------------------------- 
This should have been resolved in the svn trunk. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-02 21:48 znalo          New Issue                                    
2008-11-02 21:48 znalo          Apache Version            => 2.2.9 (Debian
Lenny)
2008-11-03 01:15 znalo          Note Added: 0000132                          
2009-06-30 14:14 nmav           Note Added: 0000158                          
2009-06-30 14:14 nmav           Status                   new => resolved     
2009-06-30 14:14 nmav           Fixed in Version          => -TRUNK          
2009-06-30 14:14 nmav           Resolution               open => fixed       
2009-06-30 14:14 nmav           Assigned To               => nmav            
2009-06-30 14:14 nmav           Issue Monitored: nmav                        
2010-07-05 03:18 nmav           Status                   resolved => closed  
======================================================================




More information about the Issues mailing list