about summary refs log tree commit diff
path: root/tls_verify.c
diff options
context:
space:
mode:
authorC. McEnroe <june@causal.agency>2020-07-27 22:59:08 -0400
committerC. McEnroe <june@causal.agency>2020-07-31 12:12:53 -0400
commit696fbb235cc1fd8fa6269c76cdfa281587e37df3 (patch)
tree67e23859002c6d7dc1d6f4a575fd97423aab2390 /tls_verify.c
parenttls_bio_cb: Use public BIO interfaces (diff)
tls_verify: Use ASN1_STRING_get0_data
Diffstat (limited to 'tls_verify.c')
-rw-r--r--tls_verify.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/tls_verify.c b/tls_verify.c
index acbe163..dbc37d8 100644
--- a/tls_verify.c
+++ b/tls_verify.c
@@ -126,12 +126,12 @@ tls_check_subject_altname(struct tls *ctx, X509 *cert, const char *name,
 			continue;
 
 		if (type == GEN_DNS) {
-			unsigned char	*data;
+			const unsigned char	*data;
 			int		 format, len;
 
 			format = ASN1_STRING_type(altname->d.dNSName);
 			if (format == V_ASN1_IA5STRING) {
-				data = ASN1_STRING_data(altname->d.dNSName);
+				data = ASN1_STRING_get0_data(altname->d.dNSName);
 				len = ASN1_STRING_length(altname->d.dNSName);
 
 				if (len < 0 || (size_t)len != strlen(data)) {
@@ -171,11 +171,11 @@ tls_check_subject_altname(struct tls *ctx, X509 *cert, const char *name,
 			}
 
 		} else if (type == GEN_IPADD) {
-			unsigned char	*data;
+			const unsigned char	*data;
 			int		 datalen;
 
 			datalen = ASN1_STRING_length(altname->d.iPAddress);
-			data = ASN1_STRING_data(altname->d.iPAddress);
+			data = ASN1_STRING_get0_data(altname->d.iPAddress);
 
 			if (datalen < 0) {
 				tls_set_errorx(ctx,