Bug 7787 - Invalid smart card certificate filters can be created
Summary: Invalid smart card certificate filters can be created
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Smart card (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: LowPrio
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-11-02 13:46 CET by Samuel Mannehed
Modified: 2021-11-09 12:59 CET (History)
0 users

See Also:
Acceptance Criteria:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Samuel Mannehed cendio 2021-11-02 13:46:08 CET 
If you enter an invalid smart card certificate issuer filter in the ThinLinc Client options, it's silently accepted and results in that no filtering is done. 

This is printed to tlclient.log when the ThinLinc client starts:

> 2021-11-02T13:40:48: Malformed token "MYINVALIDFILTER"
Nothing is shown to the user. We should be able to warn the user or disable the "OK" button perhaps?

Note that the filter can also be found in tlclient.conf, and that a user might edit that file directly.

This setting is found here:

Options -> Security -> Smart Card -> Details -> Add new/Edit Certificate filter
Note You need to log in before you can comment on or make changes to this bug.