From 06b05e21c627f87fc4bc16830099f30cc7df860b Mon Sep 17 00:00:00 2001
From: Luca Deri <deri@ntop.org>
Date: Sun, 30 Jun 2019 08:19:51 +0200
Subject: Improvemnts in SSL certificate detection

---
 src/lib/protocols/ssl.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'src/lib/protocols/ssl.c')

diff --git a/src/lib/protocols/ssl.c b/src/lib/protocols/ssl.c
index 947b8371d..f7009a788 100644
--- a/src/lib/protocols/ssl.c
+++ b/src/lib/protocols/ssl.c
@@ -339,6 +339,10 @@ static void stripCertificateTrailer(char *buffer, int buffer_len) {
 	buffer[i] = '\0', buffer_len = i;
     }
   }
+
+  /* Now all lowecase */
+  for(i=0; i<buffer_len; i++)
+    buffer[i] = tolower(buffer[i]);
 }
 
 /* https://engineering.salesforce.com/tls-fingerprinting-with-ja3-and-ja3s-247362855967 */
@@ -498,7 +502,7 @@ int getSSLcertificate(struct ndpi_detection_module_struct *ndpi_struct,
 	      if(num_found != 2) continue;
 	    }
 
-	    if(server_len+i+3 < packet->payload_packet_len) {
+	    if((server_len+i+3) < packet->payload_packet_len) {
 	      char *server_name = (char*)&packet->payload[i+4];
 	      u_int8_t begin = 0, len, j, num_dots;
 
-- 
cgit v1.2.3