codesign verify: record the common name from the signing cert for the…

… 'signed by' message
Cisco-Talos · Dec 11, 2024 · c1099f9 · c1099f9
1 parent 408b85d
commit c1099f9
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/libclamav_rust/src/codesign.rs b/libclamav_rust/src/codesign.rs
@@ -495,9 +495,11 @@ impl Verifier {
                         let signer = cert
                             .subject_name()
                             .entries()
-                            .next()
+                            .find(|name_entry| {
+                                name_entry.object().nid() == openssl::nid::Nid::COMMONNAME
+                            })
                             .ok_or(Error::InvalidDigitalSignature(
-                                "Certificate does not have any name entries".to_string(),
+                                "Certificate in the signature's cert stack does not have a Common Name entry".to_string(),
                             ))?
                             .data()
                             .as_utf8()?