[exim-dev] [Bug 1489] New: ${certextract} parse error (4.83 …

Top Page
Delete this message
Reply to this message
Author: Mike Cardwell
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1489] New: ${certextract} parse error (4.83 RC1)
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1489
           Summary: ${certextract} parse error (4.83 RC1)
           Product: Exim
           Version: N/A
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: ACLs
        AssignedTo: jgh146exb@???
        ReportedBy: exim-users@???
                CC: exim-dev@???



I just created the following config:

warn set acl_c_sig_algorithm = ${certextract{sig_algorithm}{$tls_in_peercert}}
     set acl_c_signature     = ${certextract{signature}{$tls_in_peercert}}
     logwrite                = $sender_host_address TLS SIGNATURE DETAILS:
$acl_c_sig_algorithm/$acl_c_signature


And then tailed the logs and sent myself a test email. The log entry doesn't
look anything like what I expected:

2014-06-05 12:33:54 fcad:d34b:d11c:5db3:39fc:c68b:3333:2222 TLS SIGNATURE
DETAILS: undefined/    Signature Algorithm: sha256WithRSAEncryption\n        
44:9b:ba:9e:c5:d3:b8:e5:b2:ad:6b:b3:5e:f2:18:ff:12:da:\n        
01:50:2e:84:b2:b7:5d:3d:be:11:96:9f:a0:64:e4:b0:aa:9c:\n        
fa:9a:be:37:2f:4e:a3:83:3a:4b:91:c3:47:f6:16:65:e0:8d:\n        
27:b8:e7:1f:50:1d:e8:6c:10:d0:20:76:63:bb:6a:c2:3b:75:\n        
c5:a9:63:7a:ae:c0:3d:64:48:e1:9b:f3:2e:19:1a:2a:76:40:\n        
66:ba:3e:c2:f0:1e:9c:fd:90:ea:26:28:9e:e7:7d:c9:52:30:\n        
8d:d4:aa:29:e0:10:37:2e:28:f5:17:f4:4d:0a:55:8c:5b:02:\n        
d3:4b:7f:dd:1f:37:a9:93:32:1e:07:8b:be:a9:a2:d2:20:97:\n        
32:bd:76:bf:6f:79:c8:3b:92:4b:b1:8b:d9:ef:94:18:50:e3:\n        
b9:de:48:7e:f4:85:4c:10:5b:d1:6c:48:f1:3f:00:4b:d2:e5:\n        
ba:1f:7c:d8:61:b4:04:02:68:a8:eb:f7:2d:07:e4:74:66:d5:\n        
58:4b:11:94:24:d0:62:b6:de:91:37:b2:ef:51:81:2e:22:38:\n        
b9:96:30:9f:00:72:a7:a6:9d:80:89:c6:61:c1:51:4a:d0:c2:\n        
26:63:51:26:68:2a:76:ed:6f:65:e4:af:33:d9:ac:7d:e9:46:\n         ff:4e:eb:ae\n


The machine this is running on is configured to require the sending machine
(fcad:d34b:d11c:5db3:39fc:c68b:3333:2222) to send a client cert which can be
successfully verified.


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email