oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

hxtool: add cert type: https-negotiate-server

Browse Source
This commit is contained in:
Nicolas Williams
2019-12-03 00:13:08 -06:00
parent f9a0e8f076
commit 4f8577a988
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
lib/hx509/hxtool.c
View File

@@ -1674,6 +1674,16 @@ https_server(hx509_context contextp, hx509_ca_tbs tbs, struct cert_type_opt *opt
return hx509_ca_tbs_add_eku(contextp, tbs, &asn1_oid_id_pkix_kp_serverAuth);
}
static int
https_negotiate_server(hx509_context contextp, hx509_ca_tbs tbs, struct cert_type_opt *opt)
{
int ret = hx509_ca_tbs_add_eku(contextp, tbs, &asn1_oid_id_pkekuoid);
if (ret == 0)
ret = hx509_ca_tbs_add_eku(contextp, tbs, &asn1_oid_id_pkix_kp_serverAuth);
opt->pkinit++;
return ret;
}
static int
https_client(hx509_context contextp, hx509_ca_tbs tbs, struct cert_type_opt *opt)
{
@@ -1747,6 +1757,11 @@ struct {
"Certificates used for Kerberos PK-INIT KDC certificates",
pkinit_kdc
},
{
"https-negotiate-server",
"Used for HTTPS server and many other TLS server certificate types",
https_negotiate_server
},
{
"peap-server",
"Certificate used for Radius PEAP (Protected EAP)",