From 0831b97e722be322c4bb18bcdbe7610ba98f569e Mon Sep 17 00:00:00 2001 From: Maxim Dounin Date: Thu, 21 Aug 2025 04:40:59 +0300 Subject: [PATCH] SSL: fixed subjectAltName and commonName debug logging. Previously, ASN1_STRING_length() was used as a length for "%*s" format specifier, which is wrong, since string length is expected to be "size_t", and ASN1_STRING_length() returns "int". Origin: Signed-off-by: Eugene Grebenschikov --- src/event/ngx_event_openssl.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index c827b996f..b6d419846 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -5369,7 +5369,8 @@ ngx_ssl_check_host(ngx_connection_t *c, ngx_str_t *name) ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL subjectAltName: \"%*s\"", - ASN1_STRING_length(str), ASN1_STRING_data(str)); + (size_t) ASN1_STRING_length(str), + ASN1_STRING_data(str)); if (ngx_ssl_check_name(name, str) == NGX_OK) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, @@ -5411,7 +5412,8 @@ ngx_ssl_check_host(ngx_connection_t *c, ngx_str_t *name) ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL commonName: \"%*s\"", - ASN1_STRING_length(str), ASN1_STRING_data(str)); + (size_t) ASN1_STRING_length(str), + ASN1_STRING_data(str)); if (ngx_ssl_check_name(name, str) == NGX_OK) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,