mirrors/FreeRDP
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[crypto,tls] only print fingerprint in log

Browse Source 
printing the whole PEM to log is too verbose, just use the fingerprint
instead.
This commit is contained in:
Armin Novak 2023-10-25 12:56:01 +02:00 committed by akallabeth
parent 687ed017d3
commit 32c65dbdfc
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
libfreerdp/crypto/tls.c
View File

@ -1590,7 +1590,11 @@ int tls_verify_certificate(rdpTls* tls, const rdpCertificate* cert, const char*
tls_print_certificate_name_mismatch_error(hostname, port, common_name,
dns_names, dns_names_count);
tls_print_new_certificate_warn(tls->certificate_store, hostname, port, pem);
{
char* efp = freerdp_certificate_get_fingerprint(cert);
tls_print_new_certificate_warn(tls->certificate_store, hostname, port, efp);
free(efp);
}
/* Automatically accept certificate on first use */
if (tls->settings->AutoAcceptCertificate)
@ -1652,8 +1656,12 @@ int tls_verify_certificate(rdpTls* tls, const rdpCertificate* cert, const char*
freerdp_certificate_store_load_data(tls->certificate_store, hostname, port);
/* entry was found in known_hosts file, but fingerprint does not match. ask user
* to use it */
tls_print_certificate_error(tls->certificate_store, stored_data, hostname, port,
pem);
{
char* efp = freerdp_certificate_get_fingerprint(cert);
tls_print_certificate_error(tls->certificate_store, stored_data, hostname, port,
efp);
free(efp);
}
if (!stored_data)
WLog_WARN(TAG, "Failed to get certificate entry for %s:%" PRIu16 "", hostname,