oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

add --ms-upn and add more EKU's for pk-init client.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20721 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-05-31 02:44:39 +00:00
parent db080434b8
commit 071db50a3f
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
lib/hx509/hxtool.c
View File

@@ -1284,6 +1284,17 @@ eval_types(hx509_context context,
oid_id_pkekuoid()); oid_id_pkekuoid());
if (ret) if (ret)
hx509_err(context, 1, ret, "hx509_ca_tbs_add_eku"); hx509_err(context, 1, ret, "hx509_ca_tbs_add_eku");
ret = hx509_ca_tbs_add_eku(context, tbs,
oid_id_ms_client_authentication());
if (ret)
hx509_err(context, 1, ret, "hx509_ca_tbs_add_eku");
ret = hx509_ca_tbs_add_eku(context, tbs,
oid_id_pkinit_ms_eku());
if (ret)
hx509_err(context, 1, ret, "hx509_ca_tbs_add_eku");
} else if (strcmp(type, "email") == 0) { } else if (strcmp(type, "email") == 0) {
ret = hx509_ca_tbs_add_eku(context, tbs, ret = hx509_ca_tbs_add_eku(context, tbs,
oid_id_pkix_kp_emailProtection()); oid_id_pkix_kp_emailProtection());
@@ -1305,6 +1316,16 @@ eval_types(hx509_context context,
if (ret) if (ret)
hx509_err(context, 1, ret, "hx509_ca_tbs_add_san_pkinit"); hx509_err(context, 1, ret, "hx509_ca_tbs_add_san_pkinit");
} }
if (opt->ms_upn_string) {
if (!pkinit)
errx(1, "MS up given but no pk-init oid");
ret = hx509_ca_tbs_add_san_ms_upn(context, tbs, opt->ms_upn_string);
if (ret)
hx509_err(context, 1, ret, "hx509_ca_tbs_add_san_ms_upn");
}
for (i = 0; i < opt->hostname_strings.num_strings; i++) { for (i = 0; i < opt->hostname_strings.num_strings; i++) {
const char *hostname = opt->hostname_strings.strings[i]; const char *hostname = opt->hostname_strings.strings[i];