Allow hxtool to process multiple --pk-init-principal args.
This commit is contained in:
@@ -646,7 +646,7 @@ command = {
|
|||||||
}
|
}
|
||||||
option = {
|
option = {
|
||||||
long = "pk-init-principal"
|
long = "pk-init-principal"
|
||||||
type = "string"
|
type = "strings"
|
||||||
help = "PK-INIT principal (for SAN)"
|
help = "PK-INIT principal (for SAN)"
|
||||||
}
|
}
|
||||||
option = {
|
option = {
|
||||||
|
@@ -1692,12 +1692,13 @@ eval_types(hx509_context contextp,
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if (opt->pk_init_principal_string) {
|
for (i = 0; i < opt->pk_init_principal_strings.num_strings; i++) {
|
||||||
|
const char *pk_init_princ = opt->pk_init_principal_strings.strings[i];
|
||||||
|
|
||||||
if (!ctopt.pkinit)
|
if (!ctopt.pkinit)
|
||||||
errx(1, "pk-init principal given but no pk-init oid");
|
errx(1, "pk-init principal given but no pk-init oid");
|
||||||
|
|
||||||
ret = hx509_ca_tbs_add_san_pkinit(contextp, tbs,
|
ret = hx509_ca_tbs_add_san_pkinit(contextp, tbs, pk_init_princ);
|
||||||
opt->pk_init_principal_string);
|
|
||||||
if (ret)
|
if (ret)
|
||||||
hx509_err(contextp, 1, ret, "hx509_ca_tbs_add_san_pkinit");
|
hx509_err(contextp, 1, ret, "hx509_ca_tbs_add_san_pkinit");
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user