#18613 [Opn->Fbk]: Multiple OU in x509 certificate problem

ID: 18613 Updated by: sniper@php.net Reported By: agoralski at certum dot pl -Status: Open +Status: Feedback Bug Type: OpenSSL related Operating System: Linux 2.4.18-grsec -PHP Version: 4.2.2 +PHP Version: 4.3.4 New Comment: Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip And if the bug still exists and you have some patch, PLEASE provide it as 'diff -u' here.. Previous Comments: ------------------------------------------------------------------------ [2004-04-07 03:05:57] agoralski at certum dot pl Multiple OUs are visible in "name" after openssl_x509_parse so here's a quick & dirty workaround: function get_ous($data) { if (strlen(strstr($data,'/OU='))>0) { $parts=explode('=', $data); for ($i=0, $j=count($parts); $i<$j; $i++) { if ($i>0) { if (substr($parts[$i-1], strrpos($parts[$i-1], '/')+1)=='OU') { $ret[]=substr($parts[$i], 0, strrpos($parts[$i], '/')); } } } return $ret; } else { return false; } } $cert=openssl_x509_parse($crt); $ous=get_ous($cert['name']); if (is_array($ous)) { //your code here } ------------------------------------------------------------------------ [2004-04-06 12:50:59] allins at nosc dot mil confirmed also exists in php 4.3.4 on fedora linux ------------------------------------------------------------------------ [2004-04-06 12:32:07] allins at nosc dot mil verified on RedHat 9, PHP 4.2.2 output from var_dump of array after openssl_x509_parse was performed. There should have been an ["OU"]=> "DoD" before the PKI line ["issuer"]=> array(4) { ["C"]=> string(2) "US" ["O"]=> string(15) "U.S. Government" ["OU"]=> string(3) "PKI" ["CN"]=> string(22) "DOD CLASS 3 EMAIL CA-7" ------------------------------------------------------------------------ [2002-09-11 10:52:56] sniper@php.net Any news about the patch..? ------------------------------------------------------------------------ [2002-07-29 11:40:54] jtate@php.net Please submit the diff -u output to php-dev@php.net. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/18613 -- Edit this bug report at http://bugs.php.net/?id=18613&edit=1