Function md_cert_get_alt_names

modules/md/md_crypt.c:1363–1419

}

apr_status_t md_cert_get_alt_names(apr_array_header_t **pnames, const md_cert_t *cert, apr_pool_t *p)
{
    apr_array_header_t *names;
    apr_status_t rv = APR_ENOENT;
    STACK_OF(GENERAL_NAME) *xalt_names;
    unsigned char *buf;
    int i;

    xalt_names = X509_get_ext_d2i(cert->x509, NID_subject_alt_name, NULL, NULL);
    if (xalt_names) {
        GENERAL_NAME *cval;
        const unsigned char *ip;
        int len;
        
        names = apr_array_make(p, sk_GENERAL_NAME_num(xalt_names), sizeof(char *));
        for (i = 0; i < sk_GENERAL_NAME_num(xalt_names); ++i) {
            cval = sk_GENERAL_NAME_value(xalt_names, i);
            switch (cval->type) {
                case GEN_DNS:
                case GEN_URI:
                    ASN1_STRING_to_UTF8(&buf, cval->d.ia5);
                    APR_ARRAY_PUSH(names, const char *) = apr_pstrdup(p, (char*)buf);
                    OPENSSL_free(buf);
                    break;
                case GEN_IPADD:
                    len = ASN1_STRING_length(cval->d.iPAddress);
#if OPENSSL_VERSION_NUMBER < 0x10100000L
                    ip = ASN1_STRING_data(cval->d.iPAddress);
#else
                    ip = ASN1_STRING_get0_data(cval->d.iPAddress);
#endif
                    if (len ==  4)      /* IPv4 address */
                        APR_ARRAY_PUSH(names, const char *) = apr_psprintf(p, "%u.%u.%u.%u",
                                                                           ip[0], ip[1], ip[2], ip[3]);
                    else if (len == 16) /* IPv6 address */
                        APR_ARRAY_PUSH(names, const char *) = apr_psprintf(p, "%02x%02x%02x%02x:"
                                                                              "%02x%02x%02x%02x:"
                                                                              "%02x%02x%02x%02x:"
                                                                              "%02x%02x%02x%02x",
                                                                           ip[0],  ip[1],  ip[2],  ip[3],
                                                                           ip[4],  ip[5],  ip[6],  ip[7],
                                                                           ip[8],  ip[9],  ip[10], ip[11],
                                                                           ip[12], ip[13], ip[14], ip[15]);
                    else {
                        ; /* Unknown address type - Log?  Assert? */
                    }
                    break;
                default:
                    break;
            }
        }
        sk_GENERAL_NAME_pop_free(xalt_names, GENERAL_NAME_free);
        rv = APR_SUCCESS;
    }
    *pnames = (APR_SUCCESS == rv)? names : NULL;
    return rv;
}