Skip to content

tls: copy client CAs and cert store on CertCb - #3537

Closed
indutny wants to merge 2 commits into
nodejs:masterfrom
indutny:fix/tls-ca-sni
Closed

tls: copy client CAs and cert store on CertCb#3537
indutny wants to merge 2 commits into
nodejs:masterfrom
indutny:fix/tls-ca-sni

Conversation

@indutny

@indutnyindutny commented Oct 26, 2015

Copy link
Copy Markdown
Member

Copy client CA certs and cert store when asynchronously selecting
SecureContext during SNICallback.

Fix: #2772

cc @nodejs/crypto

@mscdexmscdex added the tls Issues and PRs related to the tls subsystem. label Oct 27, 2015
bnoordhuis
bnoordhuis reviewed Oct 27, 2015
View reviewed changes
Comment threadsrc/node_crypto.cc Outdated

@bnoordhuisbnoordhuisOct 27, 2015

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You should check the return code here.

@indutnyindutnyOct 27, 2015

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea, though it can't fail in current OpenSSL implementation.

@bnoordhuis

bnoordhuis commented Oct 27, 2015

Copy link
Copy Markdown
Member

Left some comments. The commit log could go into more detail into why this change is necessary.

@indutny

indutny commented Oct 27, 2015

Copy link
Copy Markdown
MemberAuthor

@bnoordhuis pushed fixes, thanks!

@indutny

indutny commented Oct 27, 2015

Copy link
Copy Markdown
MemberAuthor

CI: https://ci.nodejs.org/job/node-test-pull-request/631/

@indutny

indutny commented Oct 27, 2015

Copy link
Copy Markdown
MemberAuthor

CI seems to be green, LGTY @bnoordhuis ?

@indutny
tls: copy client CAs and cert store on CertCb
7f60df5
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: nodejs#2772
@indutny

indutny commented Oct 27, 2015

Copy link
Copy Markdown
MemberAuthor

@bnoordhuis updated commit message too

bnoordhuis
bnoordhuis reviewed Nov 10, 2015
View reviewed changes
Comment threadsrc/node_crypto.cc Outdated

@bnoordhuisbnoordhuisNov 10, 2015

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a comment explaining that SSL_set_client_CA_list takes ownership of the duplicate? And maybe explain why you copy it from the SSL_CTX to the SSL?

@indutnyindutnyNov 12, 2015

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK.

@indutny

indutny commented Nov 12, 2015

Copy link
Copy Markdown
MemberAuthor

All fixed, PTAL @bnoordhuis

@indutny

indutny commented Nov 12, 2015

Copy link
Copy Markdown
MemberAuthor

CI: https://ci.nodejs.org/job/node-test-pull-request/715/

@bnoordhuis

bnoordhuis commented Nov 13, 2015

Copy link
Copy Markdown
Member

LGTM

@indutny

indutny commented Nov 13, 2015

Copy link
Copy Markdown
MemberAuthor

Landed in 483a41c, thank you!

@indutnyindutny closed this Nov 13, 2015
@indutny
indutny deleted the fix/tls-ca-sni branch November 13, 2015 17:48
indutny added a commit that referenced this pull request Nov 13, 2015
@indutny
tls: copy client CAs and cert store on CertCb
483a41c
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: #2772
PR-URL: #3537
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
indutny added a commit that referenced this pull request Nov 17, 2015
@indutny@Fishrock123
tls: copy client CAs and cert store on CertCb
05f0549
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: #2772
PR-URL: #3537
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
@rvaggrvagg mentioned this pull request Dec 17, 2015
Closed
@MylesBorinsMylesBorins mentioned this pull request Jan 14, 2016
Closed
@rvagg

rvagg commented Jan 15, 2016

Copy link
Copy Markdown
Member

I'm having trouble working out if this is a bugfix or something closer to a semver-minor. @indutny can you make a call on whether this would qualify for backporting to LTS?

@indutny

indutny commented Jan 15, 2016

Copy link
Copy Markdown
MemberAuthor

This is a bugfix.

@indutny

indutny commented Jan 15, 2016

Copy link
Copy Markdown
MemberAuthor

I think it qualifies for backport.

@jasnell

jasnell commented Jan 15, 2016

Copy link
Copy Markdown
Member

The line on this one may be rather fuzzy but I tend to agree with @indutny

MylesBorins pushed a commit that referenced this pull request Jan 28, 2016
@indutnyMyles Borins
tls: copy client CAs and cert store on CertCb
dac9e38
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: #2772
PR-URL: #3537
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
MylesBorins pushed a commit that referenced this pull request Feb 11, 2016
@indutnyMyles Borins
tls: copy client CAs and cert store on CertCb
c841d57
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: #2772
PR-URL: #3537
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
MylesBorins pushed a commit to MylesBorins/node that referenced this pull request Feb 11, 2016
@indutnyMyles Borins
tls: copy client CAs and cert store on CertCb
5cf132a
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: nodejs#2772
PR-URL: nodejs#3537
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
@MylesBorinsMylesBorins mentioned this pull request Feb 11, 2016
Merged
MylesBorins pushed a commit to MylesBorins/node that referenced this pull request Feb 15, 2016
@indutnyMyles Borins
tls: copy client CAs and cert store on CertCb
aefb20a
Copy client CA certs and cert store when asynchronously selecting
`SecureContext` during `SNICallback`. We already copy private key,
certificate, and certificate chain, but the client CA certs were
missing.
Fix: nodejs#2772
PR-URL: nodejs#3537
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

tlsIssues and PRs related to the tls subsystem.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

6 participants

@indutny@bnoordhuis@rvagg@jasnell@mscdex@MylesBorins