oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(hx509_context_set_missing_crl): new function

Browse Source 
Add CRL handling.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16613 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-01-19 18:14:38 +00:00
parent 9a0a60e0ee
commit 9ea664c77c
1 changed files with 22 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
lib/hx509/cert.c
View File

@@ -109,6 +109,15 @@ hx509_context_init(hx509_context *context)
return 0; return 0;
} }
void
hx509_context_set_missing_crl(hx509_context context, int flag)
{
if (flag)
context->flags |= HX509_CTX_CRL_MISSING_OK;
else
context->flags &= ~HX509_CTX_CRL_MISSING_OK;
}
void void
hx509_context_free(hx509_context *context) hx509_context_free(hx509_context *context)
{ {
@@ -251,11 +260,6 @@ hx509_verify_init_ctx(hx509_context context, hx509_verify_ctx *ctx)
void void
hx509_verify_destroy_ctx(hx509_verify_ctx ctx) hx509_verify_destroy_ctx(hx509_verify_ctx ctx)
{ {
if (ctx->trust_anchors)
hx509_certs_free(&ctx->trust_anchors);
if (ctx->revoke_ctx)
hx509_revoke_free(&ctx->revoke_ctx);
memset(ctx, 0, sizeof(*ctx)); memset(ctx, 0, sizeof(*ctx));
free(ctx); free(ctx);
} }
@@ -263,16 +267,12 @@ hx509_verify_destroy_ctx(hx509_verify_ctx ctx)
void void
hx509_verify_attach_anchors(hx509_verify_ctx ctx, hx509_certs set) hx509_verify_attach_anchors(hx509_verify_ctx ctx, hx509_certs set)
{ {
if (ctx->trust_anchors)
hx509_certs_free(&ctx->trust_anchors);
ctx->trust_anchors = set; ctx->trust_anchors = set;
} }
void void
hx509_verify_attach_revoke(hx509_verify_ctx ctx, hx509_revoke_ctx revoke) hx509_verify_attach_revoke(hx509_verify_ctx ctx, hx509_revoke_ctx revoke)
{ {
if (ctx->revoke_ctx)
hx509_revoke_free(&ctx->revoke_ctx);
ctx->revoke_ctx = revoke; ctx->revoke_ctx = revoke;
} }
@@ -1191,12 +1191,22 @@ hx509_verify_path(hx509_context context,
} }
/* /*
* Verify no certificates has been revoked. * Verify that no certificates has been revoked.
*/ */
if (ctx->revoke_ctx) { if (ctx->revoke_ctx) {
for (i = path.len - 1; i >= 0; i--) { hx509_certs cacerts;
ret = hx509_revoke_verify(context, ctx->revoke_ctx, ctx->time_now,
ret = hx509_certs_init(context, "MEMORY:cacerts", 0, NULL, &cacerts);
for (i = 0; i < path.len; i++)
hx509_certs_add(context, cacerts, path.val[i]);
for (i = 0; i < path.len; i++) {
ret = hx509_revoke_verify(context,
ctx->revoke_ctx,
cacerts,
ctx->time_now,
path.val[i]); path.val[i]);
if (ret) if (ret)
goto out; goto out;