From 2d137dedb3fa266500d5b33f5cca7846e123e6a5 Mon Sep 17 00:00:00 2001 From: Emil Engler Date: Mon, 20 Apr 2020 12:11:54 +0200 Subject: GnuTLS: Don't skip really long certificate fields Closes #5271 --- docs/KNOWN_BUGS | 7 ------- 1 file changed, 7 deletions(-) (limited to 'docs/KNOWN_BUGS') diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS index 1cbc76514..93cb36902 100644 --- a/docs/KNOWN_BUGS +++ b/docs/KNOWN_BUGS @@ -25,7 +25,6 @@ problems may have been fixed or changed somewhat since this was written! 2. TLS 2.1 CURLINFO_SSL_VERIFYRESULT has limited support 2.2 DER in keychain - 2.3 GnuTLS backend skips really long certificate fields 2.4 DarwinSSL won't import PKCS#12 client certificates without a password 2.5 Client cert handling with Issuer DN differs between backends 2.6 CURL_GLOBAL_SSL @@ -209,12 +208,6 @@ problems may have been fixed or changed somewhat since this was written! Curl doesn't recognize certificates in DER format in keychain, but it works with PEM. https://curl.haxx.se/bug/view.cgi?id=1065 -2.3 GnuTLS backend skips really long certificate fields - - libcurl calls gnutls_x509_crt_get_dn() with a fixed buffer size and if the - field is too long in the cert, it'll just return an error and the field will - be displayed blank. - 2.4 DarwinSSL won't import PKCS#12 client certificates without a password libcurl calls SecPKCS12Import with the PKCS#12 client certificate, but that -- cgit v1.2.3