Package: tinyca
Version: 0.7.5-6
Severity: important
File: /usr/bin/tinyca2
Tags: patch

Dear Maintainer,

I discovered that tinyca2 fails to properly parse the subject DN of
certificate requests when they are formatted with extra whitespace around
the '=' token, e.g. C = US, ST = California, ...

The attached patch corrects this problem.


-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tinyca depends on:
ii  libgtk2-perl            2:1.2499-1
ii  liblocale-gettext-perl  1.07-3+b1
ii  openssl                 1.1.0f-3

Versions of packages tinyca recommends:
ii  zip  3.0-11+b1

tinyca suggests no packages.

-- no debconf information
--- /usr/share/tinyca/HELPERS.pm        2006-07-25 13:12:00.000000000 -0700
+++ HELPERS.pm  2017-07-15 23:00:09.981265372 -0700
@@ -110,7 +110,7 @@
    foreach(@dn) {
       s/^\s+//;
       s/\s+$//;
-      ($k, $v) = split(/=/);
+      ($k, $v) = split(/\s*=\s*/);
       next if(not defined($k));
       if($k =~ /ou/i) {
          $tmp->{'OU'} or  $tmp->{'OU'} = [];

Reply via email to