[monitoring-plugins] check_curl: more tolerant CN= parsing when ...

[Andreas Baumann]

 Module: monitoring-plugins
 Branch: feature_check_curl
 Commit: f7efee5f9c590ee0bea65d56697903cbf26d24c5
 Author: Andreas Baumann <mail at andreasbaumann.cc>
   Date: Thu Nov  7 08:20:17 2019 +0000
    URL: https://www.monitoring-plugins.org/repositories/monitoring-plugins/commit/?id=f7efee5

check_curl: more tolerant CN= parsing when checking certificates (hit on Centos 8)

---

 plugins/check_curl.c | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/plugins/check_curl.c b/plugins/check_curl.c
index 69b6344..796c55f 100644
--- a/plugins/check_curl.c
+++ b/plugins/check_curl.c
@@ -2215,13 +2215,20 @@ net_noopenssl_check_certificate (cert_ptr_union* cert_ptr, int days_till_exp_war
 
   for (i = 0; i < cert_ptr->to_certinfo->num_of_certs; i++) {
     for (slist = cert_ptr->to_certinfo->certinfo[i]; slist; slist = slist->next) {
-      /* find first common name in subject, TODO: check alternative subjects for
+      /* find first common name in subject, 
+       * TODO: check alternative subjects for
+       * TODO: have a decent parser here and not a hack
        * multi-host certificate, check wildcards
        */
       if (strncasecmp (slist->data, "Subject:", 8) == 0) {
+        int d = 3;
         char* p = strstr (slist->data, "CN=");
+        if (p == NULL) {
+          d = 5;
+          p = strstr (slist->data, "CN = ");
+        }
         if (p != NULL) {
-          if (strncmp (host_name, p+3, strlen (host_name)) == 0) {
+          if (strncmp (host_name, p+d, strlen (host_name)) == 0) {
             cname_found = 1;
           }
         }