oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(hx509_cms_create_signed_1): provide a best effort path to the trust

Browse Source 
anchors to be stored in the SignedData packet, if find parents until
trust anchor or max length.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19094 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-11-23 18:08:23 +00:00
parent 36b3f8b61a
commit 94d63f5092
1 changed files with 12 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
lib/hx509/cms.c
View File

@@ -936,7 +936,7 @@ hx509_cms_create_signed_1(hx509_context context,
const void *data, size_t length,
const AlgorithmIdentifier *digest_alg,
hx509_cert cert,
hx509_certs trust_anchors,
hx509_certs anchors,
hx509_certs pool,
heim_octet_string *signed_data)
{
@@ -1125,21 +1125,18 @@ hx509_cms_create_signed_1(hx509_context context,
goto out;
}
if (trust_anchors) {
ret = _hx509_calculate_path(context,
trust_anchors,
0,
cert,
pool,
&path);
if (ret) {
_hx509_path_free(&path);
ret = _hx509_path_append(context, &path, cert);
}
/*
* Provide best effort path
*/
if (pool) {
_hx509_calculate_path(context,
anchors,
0,
cert,
pool,
&path);
} else
ret = _hx509_path_append(context, &path, cert);
if (ret)
goto out;
_hx509_path_append(context, &path, cert);
if (path.len) {