Author: covener
Date: Tue Jun 2 17:13:55 2026
New Revision: 1934900
Log:
Merge r1933908 from trunk:
mod_ssl: Expose serialNumber (2.5.4.5) as standard env var from certificate DN
serialNumber (2.5.4.5) is a standard LDAP attribute embedded in the subject's
and/or issuer's DN, extract it by standard means from the DN and expose
via StdEnvVars.
PR: 35154
Co-authored-by: Michael Osipov <[email protected]>
Submitted by: Benjamin Demarteau <[email protected]>
Reviewed By: michaelo, jorton, rpluem
Github: closes #644
Added:
httpd/httpd/branches/2.4.x/changes-entries/ssl-serialnumber.txt
- copied unchanged from r1933908, httpd/httpd/trunk/changes-entries/ssl-serialnumber.txt
Modified:
httpd/httpd/branches/2.4.x/ (props changed)
httpd/httpd/branches/2.4.x/modules/ssl/ssl_engine_vars.c
Copied: httpd/httpd/branches/2.4.x/changes-entries/ssl-serialnumber.txt (from r1933908, httpd/httpd/trunk/changes-entries/ssl-serialnumber.txt)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ httpd/httpd/branches/2.4.x/changes-entries/ssl-serialnumber.txt Tue Jun 2 17:13:55 2026 (r1934900, copy of r1933908, httpd/httpd/trunk/changes-entries/ssl-serialnumber.txt)
@@ -0,0 +1,4 @@
+ *) mod_ssl: Add SerialNumber as a recognized attribute type for SSL
+ distinguished name variables. [Michael Osipov <michaelo apache.org>,
+ Benjamin Demarteau <benjamin.demarteau liege.be>]
+
Modified: httpd/httpd/branches/2.4.x/modules/ssl/ssl_engine_vars.c
==============================================================================
--- httpd/httpd/branches/2.4.x/modules/ssl/ssl_engine_vars.c Tue Jun 2 17:11:08 2026 (r1934899)
+++ httpd/httpd/branches/2.4.x/modules/ssl/ssl_engine_vars.c Tue Jun 2 17:13:55 2026 (r1934900)
@@ -576,6 +576,7 @@ static const struct {
{ "G", NID_givenName, 1 },
{ "S", NID_surname, 1 },
{ "D", NID_description, 1 },
+ { "SerialNumber", NID_serialNumber, 1 },
#ifdef NID_userId
{ "UID", NID_userId, 1 },
#endif
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.