From patchwork Sun Mar 22 04:36:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Rudi Heitbaum X-Patchwork-Id: 4844 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:8796:b0:83c:d90d:321 with SMTP id cq22csp207635mab; Sat, 21 Mar 2026 21:36:35 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCW6zDwNtuyBHN42/zQ2UnrEdDJ/aAU7WWYoLw1HHqWlYgfz2NNr+O7Gt5MzOVlfp7v8j97iSB2YgTo=@openvpn.net X-Received: by 2002:a05:6871:4089:b0:417:47c0:3504 with SMTP id 586e51a60fabf-41c112c80admr5699529fac.34.1774154194869; Sat, 21 Mar 2026 21:36:34 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1774154194; cv=fail; d=google.com; s=arc-20240605; b=kBl6MxfHLVscErJff9prjymbrJFeFwm198m07xMNgxCZfgwPVD70bLHFp7aBMtkqHM QXPbcwqrb1tK0Z9Rbo/mO7UQAu/kZ5UFwjRMcWLlMjT2DfoXKbrTPwtcM6shikaQ0ca2 g3ZyF3Nor0HWq6zE/2whQaEOW/djF/q7W8wsEBpAXgeDmNXOCZWt1TQCSOcyxlPj7MoQ mwureBYZdRNb8PPhkEy9S9mW9nLx2OP13IZhCUBsr8rSOxEFZMOKkp1HVaO+9cn7KzBz DSks+ErhyKOKYxBdCQScCR6viEvanYAKXmgnTYTcEvcT4Y7ehcqUge5oRDXE9TcDCUok cTJg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:content-transfer-encoding:reply-to:from:list-subscribe :list-help:list-post:list-archive:list-unsubscribe:list-id :precedence:subject:mime-version:content-disposition:message-id:to :date:dkim-signature:dkim-signature:dkim-signature; bh=mHFy0SBcfLk4LHg6hqLxeyxqEQuGNqcnXX6bAFDqKuM=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=Wo6povJpvmBjZZr6x/NPRsf+KAea/OB4CfAuIZ/dEY09eVLX6/cG8wTxAiy/NA3x9v tuwjbRjcHR6SA5LXhXrcFwkXPorabf7EEQQg+lCCkuZHdkZ/qUSsjW1D+a+leCqgxBQd qYiefloUoxMq4uvVK84iJDDuYfrrnLqEyrzW99qzD9iZN6fdbU6cMVziWch/TeV1PrGH KZfb0Vg3L8ymvvxgRNKoRNmvLizRlf2yAtutx/LJgDHLmycNTIee+lw7JzJSFcCZMIFG CSDdGhYR6oIvCc2KIP9BqbyS6zCmJkZoV0T6uMJzbFrHmQ//P5aDs3WA61c7qIkfihru /Mkw==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b="evwUcg/9"; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=DfodGtZy; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=S2IecTiR; arc=fail (body hash mismatch); spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 586e51a60fabf-41c14dcc0c5si4550632fac.172.2026.03.21.21.36.34 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sat, 21 Mar 2026 21:36:34 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b="evwUcg/9"; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=DfodGtZy; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=S2IecTiR; arc=fail (body hash mismatch); spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=lists.sourceforge.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: Reply-To:From:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:Subject:MIME-Version:Message-ID:To:Date:Sender:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Owner; bh=mHFy0SBcfLk4LHg6hqLxeyxqEQuGNqcnXX6bAFDqKuM=; b=evwUcg/9G2vmBJVomk+7T2JrRx UtUSylV1LbjbBthgRPSNju7frUWfkvLaRhZAu5cvtUHz0ygNsC1Zg8qgTOMBH3DHtlje1KunXZoE3 KvVkA70mDuv1myEwkwOp8ipopoCXn8lS3BnoeP0RMG12mGPX650jWvF+HCAcj7h2yZsk=; Received: from [127.0.0.1] (helo=sfs-ml-1.v29.lw.sourceforge.com) by sfs-ml-1.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1w4AY9-0002TZ-8z; Sun, 22 Mar 2026 04:36:29 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-1.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1w4AY3-0002TP-Ka for openvpn-devel@lists.sourceforge.net; Sun, 22 Mar 2026 04:36:23 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=MIME-Version:Content-Transfer-Encoding:Content-Type :Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=jk9A29dtxbDuVwAfatBGUFpXAjd9SWD8OU4BWqOcuRo=; b=DfodGtZy8boLvdXqDWtcVzgCr9 DuEqYolSTC5BZmBurR74qeVvGUos52MhefaYpK4ftJfM3m+fMJnemHgGKUZ0J4mbNlaa6gY4s22h3 BngDRuDPutg7VjYBpomVJwcOhWUvtqO/vGBEk7XoqH4DFd+xUqG2YTSiEMqV+oTGUSx0=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=MIME-Version:Content-Transfer-Encoding:Content-Type:Message-ID:Subject:Cc :To:From:Date:Sender:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post: List-Owner:List-Archive; bh=jk9A29dtxbDuVwAfatBGUFpXAjd9SWD8OU4BWqOcuRo=; b=S 2IecTiR9GXGRadTfr0Qm0turReyHzQ4LZP5mLA5abMpw7TTzHn0bd9el705oiTdpigv+OzCXBPaxD sm65129XtCpNzRP7C87Tguu+qr2gk5YAjLDn1sywnVwOA4SPFW2nAZwxsXiwyB+cxqizkCw3Yjzo8 s5SlQliB2WSZ5QDs=; Received: from mail-australiaeastazon11020126.outbound.protection.outlook.com ([52.101.150.126] helo=SY8PR01CU002.outbound.protection.outlook.com) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1w4AY3-0005lw-27 for openvpn-devel@lists.sourceforge.net; Sun, 22 Mar 2026 04:36:23 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=csUamaxBQrrwOTtkEJuqBXGJUf+QNSAwz51gbSN2UkcAlfdF4OSdZJxzP+sYwLAJls4uSIXJ0ndIyzyiYEX9FZlo1GLFQW6b/MqUHuYmZBShYy1NR0VqYwsPkYkxyRVyup3By+BQFrmxz2HQuCjFSVxPBMlAN2dk69n2OZHpQJaUh5GZ1OzoBFTNQPi2oTRbN40ZqqN+VCFq7Bm3kHjla8V1tqfnVsxeTVlJsbgNkWPpdTUwotCKyWPtwS8OrY9yYbQqYWp+iHBTU7b6pTI6Q4/1jI7rSpydAojRGXjx7gPPXAvTKGfv04WVICEWFca0Nv68xVCexzlMWcop8zwuAQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=jk9A29dtxbDuVwAfatBGUFpXAjd9SWD8OU4BWqOcuRo=; b=TjIQeI6Wl5jPrN0DHvSDPaNAdjoy0MDXLoPh/Ra6I+uf0AzAfWX83rlPU0fHI0uNU35vEIkDtUUBXT3Xd5Nn/OuLCFHNhTA7FKC1RqD/T8xQtG3s01AbUDsuTemp+R1zpiGyv8i6Ggk/f77jd3hoVJL+hoc3JI/MQD9R6dbSFTuXwb0zYnnV9gLBJMcm9nillYcsZw4cpYS/LI1+AHpi6Yub1iTCDMR1ZvgD577kc9DuCNJ7mBAYgfV6YuA0i9L5eI/iQ/ZPlsrs2LJsl/epROX9B34JdHiVNHvTTXq65n3lGpkRwVFLUEdwTE+0cH+ya6TLF2fMRKGSbyJaP5ZpvQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=heitbaum.com; dmarc=pass action=none header.from=heitbaum.com; dkim=pass header.d=heitbaum.com; arc=none Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=heitbaum.com; Received: from SY7P282MB4909.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:279::22) by SYYP282MB0879.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:72::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9723.25; Sun, 22 Mar 2026 04:36:13 +0000 Received: from SY7P282MB4909.AUSP282.PROD.OUTLOOK.COM ([fe80::21b6:91f8:614d:1fdd]) by SY7P282MB4909.AUSP282.PROD.OUTLOOK.COM ([fe80::21b6:91f8:614d:1fdd%5]) with mapi id 15.20.9723.022; Sun, 22 Mar 2026 04:36:13 +0000 Date: Sun, 22 Mar 2026 04:36:00 +0000 To: openvpn-devel@lists.sourceforge.net Message-ID: Content-Disposition: inline X-ClientProxiedBy: MEWP282CA0158.AUSP282.PROD.OUTLOOK.COM (2603:10c6:220:1d7::7) To SY7P282MB4909.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:279::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SY7P282MB4909:EE_|SYYP282MB0879:EE_ X-MS-Office365-Filtering-Correlation-Id: 5f4c9392-0cd7-4557-883f-08de87cc8cac X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|1800799024|376014|56012099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SY7P282MB4909.AUSP282.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(1800799024)(376014)(56012099003)(18002099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?q?18nEYkY1Wiz6tdYvBK/k+lPvNWQh?= =?utf-8?q?DFnaIsfwLFi7dmxW5ZgoN6HnCJyQdxcBDneMikfDZ1igKMWfteTn+03sx8s7sQQWQ?= =?utf-8?q?P/V6caqx6rXMa7jYDBosa/8td8roI6/D2OlIFjVwGMaCDVERR5vAuEa5HjOpNVKis?= =?utf-8?q?ANdZ8sTuYiKR8Patcnx1Xf0vlTcUGuq26B+Eoc7JdhPoFOPjHNJGJSkmTx7JCU72u?= =?utf-8?q?cHvHM5Gqt4yjJT3UxREJsS0KTYh708Hvrp0IZsPiAjYUU+Ydsu59aZRJeZdeqEyt/?= =?utf-8?q?USbwf+VSlX9z+FyRR3VWRUkhmt05wP6nAv+u9KPRjhU/OzzbS9ZVshy5L5Vyufc8L?= =?utf-8?q?gjb9n/1xlwgGWtgekIoPd7MV9cpNSelWSgiYyOw422lpjFjEIalu8UM4fsnEmBVTW?= =?utf-8?q?nd5gT9Eqc4yMYtK0jZl10V4zCEfI0oiNz9GQJfptYX/pb6HAfnwhalr9PEmfl9qsU?= =?utf-8?q?TOO2W0o5rI8/DPD6kQs3vVkZS4ZXk+jCOdFdprz70SA6CaafgxTAiTC0u0IRFiiUQ?= =?utf-8?q?lpiObwpO1tAWHdakcY43SqvF3tpZib+FLoqeG5ufpsN6wMMSJtSHkRlN3r5+8YHG1?= =?utf-8?q?rjy3JRp/6l33nmZo2YrsFptxDKJa0/QUAXKDJ0oQmWTksIjPQXhHEaP0lyqlHntoi?= =?utf-8?q?IT5GQ4xevs1JZrfoAdjTfSoO2C2g26Z3tzOXmRQ3l4kNyrbGKJKBFfBLI2Gs9CbFJ?= =?utf-8?q?59bXn4FPySInDIj/lAeMcB8y3leqswOCYXeX+GwCmDwqttVI4cWu0+bXUvXcG6BDf?= =?utf-8?q?3BxTBsI1iOqzYIbTTQB+mKDispbJd9DyOosbaYT4S3rsVn7TSEe8jEfDJrT+/N/7r?= =?utf-8?q?MlJEyThjVwW+6YoSk6WHOsZXxep7PyrpCpDiKM3uDwDXZXdlm/eHYRabdCTr0FnNT?= =?utf-8?q?QT1DcBW9esoagQuvtD0vgIeLAMqUS41CPXQS5dWZaZ7JfWmLirbIKUk3HLDFAbdym?= =?utf-8?q?IV4SRUcTmakgYt8bZLiP6WdlkXv0I2M6Sk1qmHQbiDUe/rc8bKQUYZ6wqNFVoGLf6?= =?utf-8?q?P2AYicnChCl3Xey/ZswsB6WfH1A+nGOJH72v9CM5wgtAdmaFdOAQi04TkSrn0znOK?= =?utf-8?q?Ag/CZpmSAAHToGqa3ZPHNg/g0oQaSJ2KwLD1m6d4Kk7Mh/909kHUvudTN779Mu87v?= =?utf-8?q?+c1100/Rq56CaxSRSrfJX8ENSlbn9er4K7IHfm64BWm8s5NI0fC5QoyRsJ/R+TVtY?= =?utf-8?q?l+ODGTGHdutFCm7k9opk5mWU6sBKLLtRXGFepKh+m4W7/wGpuyBttEDVL5tj+1ymK?= =?utf-8?q?bsMpCh/z5aXB18qDfaSHdi1KSwSFnpu1sEgdGi1aSF4grzrzYzRzYtVlDYPrgJNo7?= =?utf-8?q?HCOLIlsDtNBCWefyPJ18bBLEpSKjGlsPfNK/9uGN4aDzvUkaN76RZbIl2LWxUvgD/?= =?utf-8?q?cf6ZbS44SKzl8KyBQUdB3fRNEgS5c2nEw1+hM/vfHzB4Z0zRBIfp03fHKsH+mMdT+?= =?utf-8?q?j5Z44boTXjD3wkARZVFLi02HIDwC9oNz0nc8PAez9HXJ5aS0ZqbsyegR0PAWqWe7n?= =?utf-8?q?XvSPaoyTV40VYNbRNhftzUTIVmXZq7vn6XKwk2p5+onYhcbr1vfFiav+ckFBfB9wn?= =?utf-8?q?95koNWA7pMw/rwTM8MmgY2OK81fEiidKdDZZUUGnF6OOsN3soE3FU3DDaExw1cHm6?= =?utf-8?q?QJ1hDBVWMcaI2fa6LQlHpxIOmRHUS3aw=3D=3D?= X-OriginatorOrg: heitbaum.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5f4c9392-0cd7-4557-883f-08de87cc8cac X-MS-Exchange-CrossTenant-AuthSource: SY7P282MB4909.AUSP282.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Mar 2026 04:36:13.7108 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 35ffebb5-7282-4da6-8519-efab29b0108e X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: NFvDbdJ4WBEHpHR4ERX+wIxsHW8KLm/lCSzTrIvgUwAd/jEWaiUVTkMxj6GmF0WTOYw04oJ/pSrY3EOpFJIaKg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SYYP282MB0879 X-Spam-Score: 0.4 (/) X-Spam-Report: =?unknown-8bit?q?Spam_detection_software=2C_running_on_the_sy?= =?unknown-8bit?q?stem_=22sfi-spamd-2=2Ehosts=2Ecolo=2Esdot=2Eme=22=2C?= =?unknown-8bit?q?_has_NOT_identified_this_incoming_email_as_spam=2E__The_ori?= =?unknown-8bit?q?ginal?= =?unknown-8bit?q?_message_has_been_attached_to_this_so_you_can_view_it_or_la?= =?unknown-8bit?q?bel?= =?unknown-8bit?q?_similar_future_email=2E__If_you_have_any_questions=2C_see?= =?unknown-8bit?q?_the_administrator_of_that_system_for_details=2E?= =?unknown-8bit?q?_?= =?unknown-8bit?q?_Content_preview=3A__ASN1=5FSTRING_are_now_opaque_types_in_?= =?unknown-8bit?q?OpenSSL_4=2Ex_=E2=80=94_the_internal?= =?unknown-8bit?q?_data_and_length_fields_are_no_longer_directly_accessible?= =?unknown-8bit?q?=2E_Use_the_accessor?= =?unknown-8bit?q?_API_instead=2E_Accessors_have_been_available_since_OpenSSL?= =?unknown-8bit?q?_1=2E1_=5B=2E=2E=2E=5D_?= =?unknown-8bit?q?_?= =?unknown-8bit?q?_Content_analysis_details=3A___=280=2E4_points=2C_5=2E0_req?= =?unknown-8bit?q?uired=29?= =?unknown-8bit?q?_?= =?unknown-8bit?q?_pts_rule_name______________description?= =?unknown-8bit?q?_----_----------------------_------------------------------?= =?unknown-8bit?q?--------------------?= =?unknown-8bit?q?_0=2E0_ARC=5FVALID______________Message_has_a_valid_ARC_sig?= =?unknown-8bit?q?nature?= =?unknown-8bit?q?_0=2E0_ARC=5FSIGNED_____________Message_has_a_ARC_signature?= =?unknown-8bit?q?_0=2E0_RCVD=5FIN=5FMSPIKE=5FH2______RBL=3A_Average_reputati?= =?unknown-8bit?q?on_=28+2=29?= =?unknown-8bit?q?_=5B52=2E101=2E150=2E126_listed_in_wl=2Emailspike=2Enet=5D?= =?unknown-8bit?q?_0=2E4_KHOP=5FHELO=5FFCRDNS_______Relay_HELO_differs_from_i?= =?unknown-8bit?q?ts_IP=27s_reverse_DNS?= X-Headers-End: 1w4AY3-0005lw-27 Subject: [Openvpn-devel] [PATCH] ssl_verify_openssl: use official ASN1_STRING_ API X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Patchwork-Original-From: Rudi Heitbaum via Openvpn-devel From: Rudi Heitbaum Reply-To: Rudi Heitbaum Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1860335508791266100?= X-GMAIL-MSGID: =?utf-8?q?1860335508791266100?= ASN1_STRING are now opaque types in OpenSSL 4.x — the internal data and length fields are no longer directly accessible. Use the accessor API instead. Accessors have been available since OpenSSL 1.1.0 The ASN1_STRING_length accessor is already in use, but not consistently applied. Standardise on using ASN1_STRING_length and ASN1_STRING_get0_data which allows for successful build of OpenSSL 4.x Signed-off-by: Rudi Heitbaum --- src/openvpn/ssl_verify_openssl.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/openvpn/ssl_verify_openssl.c b/src/openvpn/ssl_verify_openssl.c index 46401cd3..d96879bd 100644 --- a/src/openvpn/ssl_verify_openssl.c +++ b/src/openvpn/ssl_verify_openssl.c @@ -259,7 +259,7 @@ backend_x509_get_username(char *common_name, size_t cn_len, char *x509_username_ { ASN1_INTEGER *asn1_i = X509_get_serialNumber(peer_cert); struct gc_arena gc = gc_new(); - char *serial = format_hex_ex(asn1_i->data, asn1_i->length, 0, 1 | FHE_CAPS, NULL, &gc); + char *serial = format_hex_ex(ASN1_STRING_get0_data(asn1_i), ASN1_STRING_length(asn1_i), 0, 1 | FHE_CAPS, NULL, &gc); if (!serial || cn_len <= strlen(serial) + 2) { @@ -313,7 +313,7 @@ backend_x509_get_serial_hex(openvpn_x509_cert_t *cert, struct gc_arena *gc) { const ASN1_INTEGER *asn1_i = X509_get_serialNumber(cert); - return format_hex_ex(asn1_i->data, asn1_i->length, 0, 1, ":", gc); + return format_hex_ex(ASN1_STRING_get0_data(asn1_i), ASN1_STRING_length(asn1_i), 0, 1, ":", gc); } result_t @@ -626,7 +626,7 @@ x509_verify_ns_cert_type(openvpn_x509_cert_t *peer_cert, const int usage) { ASN1_BIT_STRING *ns; ns = X509_get_ext_d2i(peer_cert, NID_netscape_cert_type, NULL, NULL); - result = (ns && ns->length > 0 && (ns->data[0] & NS_SSL_CLIENT)) ? SUCCESS : FAILURE; + result = (ns && ASN1_STRING_length(ns) > 0 && (ASN1_STRING_get0_data(ns)[0] & NS_SSL_CLIENT)) ? SUCCESS : FAILURE; if (result == SUCCESS) { msg(M_WARN, "X509: Certificate is a client certificate yet it's purpose " @@ -654,7 +654,7 @@ x509_verify_ns_cert_type(openvpn_x509_cert_t *peer_cert, const int usage) { ASN1_BIT_STRING *ns; ns = X509_get_ext_d2i(peer_cert, NID_netscape_cert_type, NULL, NULL); - result = (ns && ns->length > 0 && (ns->data[0] & NS_SSL_SERVER)) ? SUCCESS : FAILURE; + result = (ns && ASN1_STRING_length(ns) > 0 && (ASN1_STRING_get0_data(ns)[0] & NS_SSL_SERVER)) ? SUCCESS : FAILURE; if (result == SUCCESS) { msg(M_WARN, "X509: Certificate is a server certificate yet it's purpose "