denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pki: Filter whitespace in base64 encoded EST responses

Browse Source 
As clarified in RFC 8951, section 3.1 [1].

[1] https://www.rfc-editor.org/rfc/rfc8951#name-white-space-processing

Co-authored-by: Tobias Brunner <[email protected]>
Closes strongswan/strongswan#1616
This commit is contained in:
Harald Gutmann
2023-04-03 15:10:37 +02:00
committed by Tobias Brunner
parent f6dc47f591
commit 5284cecddc
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pki/est/est_tls.c
+11 -2
View File
@@ -18,6 +18,7 @@
#include <stdio.h> #include <stdio.h>
#include <unistd.h> #include <unistd.h>
#include <errno.h> #include <errno.h>
#include <ctype.h>
#include "est_tls.h" #include "est_tls.h"
@@ -198,7 +199,6 @@ static bool parse_http_header(chunk_t *in, u_int *http_code, u_int *content_len
return (*http_code < 300); return (*http_code < 300);
} }
METHOD(est_tls_t, request, bool, METHOD(est_tls_t, request, bool,
private_est_tls_t *this, est_op_t op, chunk_t in, chunk_t *out, private_est_tls_t *this, est_op_t op, chunk_t in, chunk_t *out,
u_int *http_code, u_int *retry_after) u_int *http_code, u_int *retry_after)
@@ -206,7 +206,7 @@ METHOD(est_tls_t, request, bool,
chunk_t http = chunk_empty, data = chunk_empty, response; chunk_t http = chunk_empty, data = chunk_empty, response;
u_int content_len; u_int content_len;
char buf[1024]; char buf[1024];
int len; int i, len;
/* initialize output variables */ /* initialize output variables */
*out = chunk_empty; *out = chunk_empty;
@@ -277,6 +277,15 @@ METHOD(est_tls_t, request, bool,
} }
} }
for (i = 0, len = 0; i < data.len; i++)
{
if (!isspace(data.ptr[i]))
{
data.ptr[len++] = data.ptr[i];
}
}
data.len = len;
*out = chunk_from_base64(data, NULL); *out = chunk_from_base64(data, NULL);
chunk_free(&data); chunk_free(&data);
} }