Name: Tomcat Native Fork for Netty
Short Name: netty-tcnative
URL: https://github.com/netty/netty-tcnative.git
Version: 2.0.0.Final
Date: March 9, 2017
Revision: 28d9d70090f1b18927f4554621648cc1922d6e05
License: Apache 2.0
License File: LICENSE
Security Critical: no
Shipped: no
The library is not security critical because it is used for tests only.
Do not link it into production code.
Description:
netty-tcnative is a fork of Tomcat Native. It includes a set of changes contributed
by Twitter, Inc, such as:
Simplified distribution and linkage of native library
Complete mavenization of the project
Improved OpenSSL support
Local Modifications:
diff --git a/c/sslcontext.c b/c/sslcontext.c
index 5668298..25bfb6e 100644
--- a/c/sslcontext.c
+++ b/c/sslcontext.c
@@ -1178,7 +1178,7 @@ static int SSL_cert_verify(X509_STORE_CTX *ctx, void *arg) {
tcn_ssl_ctxt_t *c = SSL_get_app_data2(ssl);
TCN_ASSERT(c != NULL);
tcn_ssl_verify_config_t* verify_config = SSL_get_app_data4(ssl);
- TCN_ASSERT(verify_confg != NULL);
+ TCN_ASSERT(verify_config != NULL);
// Get a stack of all certs in the chain
STACK_OF(X509) *sk = ctx->untrusted;
diff --git a/c/ssl_private.h b/c/ssl_private.h
index e101f08..9cfe24a 100644
--- a/c/ssl_private.h
+++ b/c/ssl_private.h
@@ -49,20 +49,21 @@
#endif
#include "apr_thread_rwlock.h"
#include "apr_atomic.h"
#include <stdbool.h>
/* OpenSSL headers */
#include <openssl/opensslv.h>
#include <openssl/ssl.h>
#include <openssl/err.h>
+#include <openssl/hmac.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/pkcs12.h>
#include <openssl/crypto.h>
#include <openssl/evp.h>
#include <openssl/rand.h>
#include <openssl/x509v3.h>
#define ERR_LEN 256