Fix for last few commits

The TLS attrs are strings, so we don't need VALUEs

diff --git a/share/dictionary.freeradius.internal b/share/dictionary.freeradius.internal
index 0208b38..66a73f2 100644 (file)
--- a/share/dictionary.freeradius.internal
+++ b/share/dictionary.freeradius.internal
@@ -528,8 +528,6 @@ ATTRIBUTE   TLS-Client-Cert-Subject-Alt-Name-Dns    1931    string
 ATTRIBUTE      TLS-Client-Cert-Subject-Alt-Name-Upn    1932    string
 ATTRIBUTE      TLS-PSK-Identity                        1933    string
 
-VALUE  TLS-Client-Cert-X509v3-Extended-Key-Usage TLS-Web-Client-Authentication 130
-
 # 1934 - 1939: reserved for future cert attributes
 
 #

diff --git a/src/main/tls.c b/src/main/tls.c
index 1438d03..8e910e3 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1896,14 +1896,6 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
 
                        value[len] = '\0';
 
-                       /*
-                        *      Mash the OpenSSL name to our name, and
-                        *      create the attribute.
-                        */
-                       for (p = value; *p != '\0'; p++) {
-                               if (*p == ' ') *p = '-';
-                       }
-
                        vp = pairmake(talloc_ctx, certs, attribute, value, T_OP_ADD);
                        if (!vp) {
                                RDEBUG3("Skipping %s += '%s'.  Please check that both the "