Possible off-by-1 in crypt32/chain.c match_common_names

2011-08-04 Thread William Pettersson
Hey Juan (+list), Trying to get the new Blizzard systemcheck program working under Wine, I ran into an SSL issue. Initially the issue looked like: trace:chain:match_dns_to_subject_dn L"sea.battle.net" trace:crypt:CryptDecodeObjectEx (0x0001, #0014, 0x14f5bc, 115, 0x8001, (nil), 0xd1c25c, 0

Re: Possible off-by-1 in crypt32/chain.c match_common_names

2011-08-04 Thread Juan Lang
Hi William, > trace:chain:match_common_name CN = L"*.battle.net\" > warn:chain:match_domain_component domain component L"net" too short for > L"net\" That CN is coming from the certificate. > Any thoughts or ideas on whether this is actually a bug and if so, how to > fix it? It's partly