oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Fix spelling/grammar in various PKINIT messages

Browse Source 
Only error messages and code comments touched.
This commit is contained in:
Robert Crowston
2021-10-15 00:01:16 +01:00
committed by Luke Howard
parent a7f0b14f59
commit 6d1e3c3d5b
4 changed files with 52 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
kdc/pkinit.c
View File

@@ -404,7 +404,7 @@ _kdc_pk_rd_padata(astgs_request_t priv,
*ret_params = NULL; *ret_params = NULL;
if (!config->enable_pkinit) { if (!config->enable_pkinit) {
kdc_log(context, config, 0, "PK-INIT request but PK-INIT not enabled"); kdc_log(context, config, 0, "PKINIT request but PKINIT not enabled");
krb5_clear_error_message(context); krb5_clear_error_message(context);
return 0; return 0;
} }
@@ -472,7 +472,7 @@ _kdc_pk_rd_padata(astgs_request_t priv,
if (_kdc_is_anonymous(context, client->entry.principal)) { if (_kdc_is_anonymous(context, client->entry.principal)) {
ret = KRB5_KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED; ret = KRB5_KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED;
krb5_set_error_message(context, ret, krb5_set_error_message(context, ret,
"Anon not supported in RSA mode"); "Anonymous client not supported in RSA mode");
goto out; goto out;
} }
@@ -651,7 +651,7 @@ _kdc_pk_rd_padata(astgs_request_t priv,
der_heim_oid_cmp(&eContentType, &asn1_oid_id_pkauthdata) != 0) der_heim_oid_cmp(&eContentType, &asn1_oid_id_pkauthdata) != 0)
{ {
ret = KRB5_BADMSGTYPE; ret = KRB5_BADMSGTYPE;
krb5_set_error_message(context, ret, "got wrong oid for pkauthdata"); krb5_set_error_message(context, ret, "got wrong oid for PK AuthData");
goto out; goto out;
} }
@@ -682,7 +682,7 @@ _kdc_pk_rd_padata(astgs_request_t priv,
if (ap.clientPublicValue) { if (ap.clientPublicValue) {
ret = KRB5KRB_ERR_GENERIC; ret = KRB5KRB_ERR_GENERIC;
krb5_set_error_message(context, ret, krb5_set_error_message(context, ret,
"DH not supported for windows"); "DH not supported for Win2k");
goto out; goto out;
} }
free_AuthPack_Win2k(&ap); free_AuthPack_Win2k(&ap);
@@ -706,7 +706,7 @@ _kdc_pk_rd_padata(astgs_request_t priv,
free_AuthPack(&ap); free_AuthPack(&ap);
ret = KRB5_KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED; ret = KRB5_KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED;
krb5_set_error_message(context, ret, krb5_set_error_message(context, ret,
"Anon not supported in RSA mode"); "Anonymous client not supported in RSA mode");
goto out; goto out;
} }
@@ -733,7 +733,8 @@ _kdc_pk_rd_padata(astgs_request_t priv,
&cp->u.ecdh.public_key); &cp->u.ecdh.public_key);
} else { } else {
ret = KRB5_BADMSGTYPE; ret = KRB5_BADMSGTYPE;
krb5_set_error_message(context, ret, "PKINIT unknown DH mechanism"); krb5_set_error_message(context, ret,
"PKINIT unknown DH mechanism");
} }
if (ret) { if (ret) {
free_AuthPack(&ap); free_AuthPack(&ap);
@@ -771,7 +772,7 @@ _kdc_pk_rd_padata(astgs_request_t priv,
} else } else
krb5_abortx(context, "internal pkinit error"); krb5_abortx(context, "internal pkinit error");
kdc_log(context, config, 0, "PK-INIT request of type %s", type); kdc_log(context, config, 0, "PKINIT request of type %s", type);
out: out:
if (ret) if (ret)
@@ -1327,7 +1328,8 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
&kx, &size, ret); &kx, &size, ret);
free_EncryptedData(&kx); free_EncryptedData(&kx);
if (ret) { if (ret) {
krb5_set_error_message(context, ret, "encoding of PKINIT-KX failed %d", ret); krb5_set_error_message(context, ret,
"encoding of PKINIT-KX failed %d", ret);
free_PA_PK_AS_REP(&rep); free_PA_PK_AS_REP(&rep);
goto out; goto out;
} }
@@ -1369,7 +1371,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
if (len != size) if (len != size)
krb5_abortx(context, "Internal ASN.1 encoder error"); krb5_abortx(context, "Internal ASN.1 encoder error");
kdc_log(context, config, 0, "PK-INIT using %s %s", type, other); kdc_log(context, config, 0, "PKINIT using %s %s", type, other);
} else if (cp->type == PKINIT_WIN2K) { } else if (cp->type == PKINIT_WIN2K) {
PA_PK_AS_REP_Win2k rep; PA_PK_AS_REP_Win2k rep;
@@ -1378,7 +1380,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
if (cp->keyex != USE_RSA) { if (cp->keyex != USE_RSA) {
ret = KRB5KRB_ERR_GENERIC; ret = KRB5KRB_ERR_GENERIC;
krb5_set_error_message(context, ret, krb5_set_error_message(context, ret,
"Windows PK-INIT doesn't support DH"); "Win2k PKINIT doesn't support DH");
goto out; goto out;
} }
@@ -1436,7 +1438,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
} }
} else } else
krb5_abortx(context, "PK-INIT internal error"); krb5_abortx(context, "PKINIT internal error");
ret = krb5_padata_add(context, md, pa_type, buf, len); ret = krb5_padata_add(context, md, pa_type, buf, len);
@@ -1461,7 +1463,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
fd = open(config->pkinit_kdc_ocsp_file, O_RDONLY); fd = open(config->pkinit_kdc_ocsp_file, O_RDONLY);
if (fd < 0) { if (fd < 0) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"PK-INIT failed to open ocsp data file %d", errno); "PKINIT failed to open ocsp data file %d", errno);
goto out_ocsp; goto out_ocsp;
} }
ret = fstat(fd, &sb); ret = fstat(fd, &sb);
@@ -1469,7 +1471,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
ret = errno; ret = errno;
close(fd); close(fd);
kdc_log(context, config, 0, kdc_log(context, config, 0,
"PK-INIT failed to stat ocsp data %d", ret); "PKINIT failed to stat ocsp data %d", ret);
goto out_ocsp; goto out_ocsp;
} }
@@ -1477,7 +1479,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
if (ret) { if (ret) {
close(fd); close(fd);
kdc_log(context, config, 0, kdc_log(context, config, 0,
"PK-INIT failed to stat ocsp data %d", ret); "PKINIT failed to stat ocsp data %d", ret);
goto out_ocsp; goto out_ocsp;
} }
ocsp.data.length = sb.st_size; ocsp.data.length = sb.st_size;
@@ -1485,7 +1487,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
close(fd); close(fd);
if (ret != sb.st_size) { if (ret != sb.st_size) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"PK-INIT failed to read ocsp data %d", errno); "PKINIT failed to read ocsp data %d", errno);
goto out_ocsp; goto out_ocsp;
} }
@@ -1497,7 +1499,7 @@ _kdc_pk_mk_pa_reply(astgs_request_t r, pk_client_params *cp)
&ocsp.expire); &ocsp.expire);
if (ret) { if (ret) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"PK-INIT failed to verify ocsp data %d", ret); "PKINIT failed to verify ocsp data %d", ret);
krb5_data_free(&ocsp.data); krb5_data_free(&ocsp.data);
ocsp.expire = 0; ocsp.expire = 0;
} else if (ocsp.expire > 180) { } else if (ocsp.expire > 180) {
@@ -1563,13 +1565,13 @@ match_rfc_san(krb5_context context,
if (ret) { if (ret) {
const char *msg = krb5_get_error_message(context, ret); const char *msg = krb5_get_error_message(context, ret);
kdc_log(context, config, 0, kdc_log(context, config, 0,
"Decoding kerberos name in certificate failed: %s", msg); "Decoding Kerberos principal name in certificate failed: %s", msg);
krb5_free_error_message(context, msg); krb5_free_error_message(context, msg);
break; break;
} }
if (size != list.val[i].length) { if (size != list.val[i].length) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"Decoding kerberos name have extra bits on the end"); "Decoded Kerberos principal name did not have expected length");
return KRB5_KDC_ERR_CLIENT_NAME_MISMATCH; return KRB5_KDC_ERR_CLIENT_NAME_MISMATCH;
} }
@@ -1618,7 +1620,7 @@ match_ms_upn_san(krb5_context context,
if (list.len != 1) { if (list.len != 1) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"More then one PK-INIT MS UPN SAN"); "More than one PKINIT MS UPN SAN");
ret = KRB5_KDC_ERR_CLIENT_NAME_MISMATCH; ret = KRB5_KDC_ERR_CLIENT_NAME_MISMATCH;
goto out; goto out;
} }
@@ -1715,7 +1717,7 @@ _kdc_pk_check_client(astgs_request_t r,
return ret; return ret;
kdc_log(context, config, 0, kdc_log(context, config, 0,
"Trying to authorize PK-INIT subject DN %s", "Trying to authorize PKINIT subject DN %s",
*subject_name); *subject_name);
ret = hdb_entry_get_pkinit_cert(&client->entry, &pc); ret = hdb_entry_get_pkinit_cert(&client->entry, &pc);
@@ -1734,7 +1736,7 @@ _kdc_pk_check_client(astgs_request_t r,
hx509_cert_free(cert); hx509_cert_free(cert);
if (ret == 0) { if (ret == 0) {
kdc_log(context, config, 5, kdc_log(context, config, 5,
"Found matching PK-INIT cert in hdb"); "Found matching PKINIT cert in hdb");
return 0; return 0;
} }
} }
@@ -1748,7 +1750,7 @@ _kdc_pk_check_client(astgs_request_t r,
client->entry.principal); client->entry.principal);
if (ret == 0) { if (ret == 0) {
kdc_log(context, config, 5, kdc_log(context, config, 5,
"Found matching PK-INIT SAN in certificate"); "Found matching PKINIT SAN in certificate");
return 0; return 0;
} }
ret = match_ms_upn_san(context, config, ret = match_ms_upn_san(context, config,
@@ -1780,7 +1782,7 @@ _kdc_pk_check_client(astgs_request_t r,
continue; continue;
kdc_log(context, config, 5, kdc_log(context, config, 5,
"Found matching PK-INIT database ACL"); "Found matching PKINIT database ACL");
return 0; return 0;
} }
} }
@@ -1796,7 +1798,7 @@ _kdc_pk_check_client(astgs_request_t r,
if (strcmp(principal_mappings.val[i].subject, *subject_name) != 0) if (strcmp(principal_mappings.val[i].subject, *subject_name) != 0)
continue; continue;
kdc_log(context, config, 5, kdc_log(context, config, 5,
"Found matching PK-INIT FILE ACL"); "Found matching PKINIT FILE ACL");
return 0; return 0;
} }
@@ -1991,7 +1993,7 @@ krb5_kdc_pk_initialize(krb5_context context,
if (ret == 0) { if (ret == 0) {
hx509_name_to_string(name, &str); hx509_name_to_string(name, &str);
krb5_warnx(context, "WARNING Found KDC certificate (%s)" krb5_warnx(context, "WARNING Found KDC certificate (%s)"
"is missing the PK-INIT KDC EKU, this is bad for " "is missing the PKINIT KDC EKU, this is bad for "
"interoperability.", str); "interoperability.", str);
hx509_name_free(&name); hx509_name_free(&name);
free(str); free(str);
@@ -2000,7 +2002,7 @@ krb5_kdc_pk_initialize(krb5_context context,
hx509_cert_free(cert); hx509_cert_free(cert);
} else } else
krb5_warnx(context, "PKINIT: failed to find a signing " krb5_warnx(context, "PKINIT: failed to find a signing "
"certifiate with a public key"); "certificate with a public key");
} }
if (krb5_config_get_bool_default(context, if (krb5_config_get_bool_default(context,

13
lib/hx509/ca.c
View File

@@ -224,12 +224,12 @@ hx509_ca_tbs_template_units(void)
} }
/** /**
* Initialize the to-be-signed certificate object from a template certifiate. * Initialize the to-be-signed certificate object from a template certificate.
* *
* @param context A hx509 context. * @param context A hx509 context.
* @param tbs object to be signed. * @param tbs object to be signed.
* @param flags bit field selecting what to copy from the template * @param flags bit field selecting what to copy from the template
* certifiate. * certificate.
* @param cert template certificate. * @param cert template certificate.
* *
* @return An hx509 error code, see hx509_get_error_string(). * @return An hx509 error code, see hx509_get_error_string().
@@ -1294,7 +1294,8 @@ hx509_ca_tbs_add_san_hardwareModuleName_string(hx509_context context,
p = strchr(freeme, ':'); p = strchr(freeme, ':');
if (!p) { if (!p) {
hx509_set_error_string(context, 0, EINVAL, hx509_set_error_string(context, 0, EINVAL,
"Invalid HardwareModuleName string (should be \"<oid>:<serial>\")", "Invalid HardwareModuleName string (should be "
"\"<oid>:<serial>\")",
oidstr); oidstr);
free(freeme); free(freeme);
return EINVAL; return EINVAL;
@@ -1739,7 +1740,7 @@ ca_sign(hx509_context context,
/* signature AlgorithmIdentifier, */ /* signature AlgorithmIdentifier, */
ret = copy_AlgorithmIdentifier(sigalg, &tbsc->signature); ret = copy_AlgorithmIdentifier(sigalg, &tbsc->signature);
if (ret) { if (ret) {
hx509_set_error_string(context, 0, ret, "Failed to copy sigature alg"); hx509_set_error_string(context, 0, ret, "Failed to copy signature alg");
goto out; goto out;
} }
/* issuer Name, */ /* issuer Name, */
@@ -2568,11 +2569,11 @@ get_cf(hx509_context context,
ret = 0; ret = 0;
if (ret) { if (ret) {
heim_log_msg(context->hcontext, logf, 3, NULL, heim_log_msg(context->hcontext, logf, 3, NULL,
"No configuration for %s %s certificates realm " "No configuration for %s %s certificate's realm "
"-> %s -> kx509 -> %s%s%s", def, label, realm, label, "-> %s -> kx509 -> %s%s%s", def, label, realm, label,
svc ? " -> " : "", svc ? svc : ""); svc ? " -> " : "", svc ? svc : "");
hx509_set_error_string(context, 0, EACCES, hx509_set_error_string(context, 0, EACCES,
"No configuration for %s %s certificates realm " "No configuration for %s %s certificate's realm "
"-> %s -> kx509 -> %s%s%s", def, label, realm, label, "-> %s -> kx509 -> %s%s%s", def, label, realm, label,
svc ? " -> " : "", svc ? svc : ""); svc ? " -> " : "", svc ? svc : "");
} }

24
lib/hx509/cert.c
View File

@@ -981,7 +981,7 @@ check_key_usage(hx509_context context, const Certificate *cert,
if (req_present) { if (req_present) {
hx509_set_error_string(context, 0, HX509_KU_CERT_MISSING, hx509_set_error_string(context, 0, HX509_KU_CERT_MISSING,
"Required extension key " "Required extension key "
"usage missing from certifiate"); "usage missing from certificate");
return HX509_KU_CERT_MISSING; return HX509_KU_CERT_MISSING;
} }
return 0; return 0;
@@ -999,7 +999,7 @@ check_key_usage(hx509_context context, const Certificate *cert,
_hx509_unparse_Name(&cert->tbsCertificate.subject, &name); _hx509_unparse_Name(&cert->tbsCertificate.subject, &name);
hx509_set_error_string(context, 0, HX509_KU_CERT_MISSING, hx509_set_error_string(context, 0, HX509_KU_CERT_MISSING,
"Key usage %s required but missing " "Key usage %s required but missing "
"from certifiate %s", buf, "from certificate %s", buf,
name ? name : "<unknown>"); name ? name : "<unknown>");
free(name); free(name);
return HX509_KU_CERT_MISSING; return HX509_KU_CERT_MISSING;
@@ -1578,8 +1578,8 @@ hx509_cert_get_base_subject(hx509_context context, hx509_cert c,
if (is_proxy_cert(context, c->data, NULL) == 0) { if (is_proxy_cert(context, c->data, NULL) == 0) {
int ret = HX509_PROXY_CERTIFICATE_NOT_CANONICALIZED; int ret = HX509_PROXY_CERTIFICATE_NOT_CANONICALIZED;
hx509_set_error_string(context, 0, ret, hx509_set_error_string(context, 0, ret,
"Proxy certificate have not been " "Proxy certificate has not been "
"canonicalize yet, no base name"); "canonicalized yet: no base name");
return ret; return ret;
} }
return _hx509_name_from_Name(&c->data->tbsCertificate.subject, name); return _hx509_name_from_Name(&c->data->tbsCertificate.subject, name);
@@ -1752,7 +1752,7 @@ get_x_unique_id(hx509_context context, const char *name,
if (cert == NULL) { if (cert == NULL) {
ret = HX509_EXTENSION_NOT_FOUND; ret = HX509_EXTENSION_NOT_FOUND;
hx509_set_error_string(context, 0, ret, "%s unique id doesn't exists", name); hx509_set_error_string(context, 0, ret, "%s unique id doesn't exist", name);
return ret; return ret;
} }
ret = der_copy_bit_string(cert, subject); ret = der_copy_bit_string(cert, subject);
@@ -2173,7 +2173,7 @@ check_name_constraints(hx509_context context,
/* allow null subjectNames, they wont matches anything */ /* allow null subjectNames, they wont matches anything */
if (match == 0 && !subject_null_p(c)) { if (match == 0 && !subject_null_p(c)) {
hx509_set_error_string(context, 0, HX509_VERIFY_CONSTRAINTS, hx509_set_error_string(context, 0, HX509_VERIFY_CONSTRAINTS,
"Error verify constraints, " "Error verifying constraints: "
"certificate didn't match any " "certificate didn't match any "
"permitted subtree"); "permitted subtree");
return HX509_VERIFY_CONSTRAINTS; return HX509_VERIFY_CONSTRAINTS;
@@ -2188,7 +2188,7 @@ check_name_constraints(hx509_context context,
} }
if (match) { if (match) {
hx509_set_error_string(context, 0, HX509_VERIFY_CONSTRAINTS, hx509_set_error_string(context, 0, HX509_VERIFY_CONSTRAINTS,
"Error verify constraints, " "Error verifying constraints: "
"certificate included in excluded " "certificate included in excluded "
"subtree"); "subtree");
return HX509_VERIFY_CONSTRAINTS; return HX509_VERIFY_CONSTRAINTS;
@@ -2245,7 +2245,7 @@ hx509_verify_path(hx509_context context,
ret = HX509_PROXY_CERT_INVALID; ret = HX509_PROXY_CERT_INVALID;
hx509_set_error_string(context, 0, ret, hx509_set_error_string(context, 0, ret,
"Proxy certificate is not allowed as an EE " "Proxy certificate is not allowed as an EE "
"certificae if proxy certificate is disabled"); "certificate if proxy certificate is disabled");
return ret; return ret;
} }
@@ -2346,7 +2346,7 @@ hx509_verify_path(hx509_context context,
ret = HX509_PATH_TOO_LONG; ret = HX509_PATH_TOO_LONG;
hx509_set_error_string(context, 0, ret, hx509_set_error_string(context, 0, ret,
"Proxy certificate chain " "Proxy certificate chain "
"longer then allowed"); "longer than allowed");
goto out; goto out;
} }
/* XXX MUST check info.proxyPolicy */ /* XXX MUST check info.proxyPolicy */
@@ -2356,7 +2356,7 @@ hx509_verify_path(hx509_context context,
if (find_extension(c, &asn1_oid_id_x509_ce_subjectAltName, &j)) { if (find_extension(c, &asn1_oid_id_x509_ce_subjectAltName, &j)) {
ret = HX509_PROXY_CERT_INVALID; ret = HX509_PROXY_CERT_INVALID;
hx509_set_error_string(context, 0, ret, hx509_set_error_string(context, 0, ret,
"Proxy certificate have explicitly " "Proxy certificate has explicitly "
"forbidden subjectAltName"); "forbidden subjectAltName");
goto out; goto out;
} }
@@ -2365,7 +2365,7 @@ hx509_verify_path(hx509_context context,
if (find_extension(c, &asn1_oid_id_x509_ce_issuerAltName, &j)) { if (find_extension(c, &asn1_oid_id_x509_ce_issuerAltName, &j)) {
ret = HX509_PROXY_CERT_INVALID; ret = HX509_PROXY_CERT_INVALID;
hx509_set_error_string(context, 0, ret, hx509_set_error_string(context, 0, ret,
"Proxy certificate have explicitly " "Proxy certificate has explicitly "
"forbidden issuerAltName"); "forbidden issuerAltName");
goto out; goto out;
} }
@@ -3453,7 +3453,7 @@ hx509_query_unparse_stats(hx509_context context, int printtype, FILE *out)
return; return;
f = fopen(context->querystat, "r"); f = fopen(context->querystat, "r");
if (f == NULL) { if (f == NULL) {
fprintf(out, "No statistic file %s: %s.\n", fprintf(out, "No statistics file %s: %s.\n",
context->querystat, strerror(errno)); context->querystat, strerror(errno));
return; return;
} }

11
lib/hx509/revoke.c
View File

@@ -40,7 +40,7 @@
* revocation for destroyed private keys too (smartcard broken), but * revocation for destroyed private keys too (smartcard broken), but
* that should not be a problem. * that should not be a problem.
* *
* CRL is a list of certifiates that have expired. * CRL is a list of certificates that have expired.
* *
* OCSP is an online checking method where the requestor sends a list * OCSP is an online checking method where the requestor sends a list
* of certificates to the OCSP server to return a signed reply if they * of certificates to the OCSP server to return a signed reply if they
@@ -217,7 +217,7 @@ verify_ocsp(hx509_context context,
ret = _hx509_cert_is_parent_cmp(s, p, 0); ret = _hx509_cert_is_parent_cmp(s, p, 0);
if (ret != 0) { if (ret != 0) {
ret = HX509_PARENT_NOT_CA; ret = HX509_PARENT_NOT_CA;
hx509_set_error_string(context, 0, ret, "Revoke OCSP signer is " hx509_set_error_string(context, 0, ret, "Revoke OCSP signer "
"doesn't have CA as signer certificate"); "doesn't have CA as signer certificate");
goto out; goto out;
} }
@@ -550,7 +550,7 @@ verify_crl(hx509_context context,
signer = crl_parent; signer = crl_parent;
if (ret) { if (ret) {
hx509_set_error_string(context, HX509_ERROR_APPEND, ret, hx509_set_error_string(context, HX509_ERROR_APPEND, ret,
"Failed to verify revoke " "Failed to verify revocation "
"status of CRL signer"); "status of CRL signer");
goto out; goto out;
} }
@@ -647,7 +647,7 @@ hx509_revoke_add_crl(hx509_context context,
if (strncmp(path, "FILE:", 5) != 0) { if (strncmp(path, "FILE:", 5) != 0) {
hx509_set_error_string(context, 0, HX509_UNSUPPORTED_OPERATION, hx509_set_error_string(context, 0, HX509_UNSUPPORTED_OPERATION,
"unsupport type in %s", path); "unsupported type in %s", path);
return HX509_UNSUPPORTED_OPERATION; return HX509_UNSUPPORTED_OPERATION;
} }
@@ -879,8 +879,7 @@ hx509_revoke_verify(hx509_context context,
return 0; return 0;
hx509_set_error_string(context, HX509_ERROR_APPEND, hx509_set_error_string(context, HX509_ERROR_APPEND,
HX509_REVOKE_STATUS_MISSING, HX509_REVOKE_STATUS_MISSING,
"No revoke status found for " "No revocation status found for certificates");
"certificates");
return HX509_REVOKE_STATUS_MISSING; return HX509_REVOKE_STATUS_MISSING;
} }