[xmlsec] x509vfy.c:xmlSecOpenSSLX509NamesCompare()

Aleksey Sanin aleksey at aleksey.com
Wed Jul 2 07:30:17 PDT 2003


I think I found the problem: the OBJ_cmp() (and 
xmlSecOpenSSLX509_NAME_ENTRY_cmp)
compare object names and not object values. Thus when we do sort names 
entries in
xmlSecOpenSSLX509NamesCompare() it sorts by object names correctly but 
fails to sort
by object values. Next when we walk thru the list of entries in 
xmlSecOpenSSLX509_NAME_cmp()
we compare both names and values. But sorting order is not deterministic 
for entries
with the same name!

Ok, I think I can fix it relativly easy... Thanks for bug report!

Aleksey





More information about the xmlsec mailing list