Add test for escaping

tests/conftest.py

@@ -57,8 +57,8 @@ def tls_certificate(tls_certificate_authority: trustme.CA) -> trustme.LeafCert:
 
 
 @pytest.fixture
-def tls_client_certificate(tls_certificate_authority: trustme.CA) -> trustme.LeafCert:
-    return tls_certificate_authority.issue_cert("client@example.com", common_name="uvicorn client")
+def tls_client_certificate(request, tls_certificate_authority: trustme.CA) -> trustme.LeafCert:
+    return tls_certificate_authority.issue_cert("client@example.com", common_name=getattr(request, "param", "uvicorn client"))
 
 
 @pytest.fixture

tests/test_ssl.py

@@ -37,13 +37,28 @@ async def test_run(
 
 
 @pytest.mark.anyio
+@pytest.mark.parametrize(
+    "tls_client_certificate, expected_common_name",
+    [
+        ("test common name", "test common name"),
+        (' \\,+"<>;=\000\n\r ', 'CN=\\ \\\\\\,\\+\\"\\<\\>\\;\\=\\\x00\\0a\\0d\\ '),
+    ],
+    indirect=["tls_client_certificate"],
+)
 async def test_run_httptools_client_cert(
     tls_ca_ssl_context,
     tls_certificate_server_cert_path,
     tls_certificate_private_key_path,
     tls_ca_certificate_pem_path,
     tls_client_certificate_pem_path,
+    expected_common_name,
 ):
+    async def app(scope, receive, send):
+        assert scope["type"] == "http"
+        assert expected_common_name in scope["extensions"]["tls"]["client_cert_name"]
+        await send({"type": "http.response.start", "status": 204, "headers": []})
+        await send({"type": "http.response.body", "body": b"", "more_body": False})
+
     config = Config(
         app=app,
         loop="asyncio",

uvicorn/protocols/utils.py

@@ -143,6 +143,6 @@ def get_tls_info(transport: asyncio.Transport) -> dict[object, object]:
         ssl_info["tls_version"] = (
             TLS_VERSION_MAP[ssl_object.version()] if ssl_object.version() in TLS_VERSION_MAP else None
         )
-        ssl_info["cipher_suite"] = TLS_CIPHER_SUITES[ssl_object.cipher()[0]]
+        ssl_info["cipher_suite"] = getattr(TLS_CIPHER_SUITES, ssl_object.cipher()[0], None)
 
     return ssl_info