oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add lifetime to crls.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20850 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-03 18:00:29 +00:00
parent 5a3127d3cc
commit c08a7ed62f
1 changed files with 20 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
lib/hx509/revoke.c
View File

@@ -1,5 +1,5 @@
/* /*
* Copyright (c) 2006 Kungliga Tekniska H<>gskolan * Copyright (c) 2006 - 2007 Kungliga Tekniska H<>gskolan
* (Royal Institute of Technology, Stockholm, Sweden). * (Royal Institute of Technology, Stockholm, Sweden).
* All rights reserved. * All rights reserved.
* *
@@ -1059,6 +1059,7 @@ out:
struct hx509_crl { struct hx509_crl {
hx509_certs revoked; hx509_certs revoked;
time_t expire;
}; };
int int
@@ -1077,6 +1078,7 @@ hx509_crl_alloc(hx509_context context, hx509_crl *crl)
free(*crl); free(*crl);
*crl = NULL; *crl = NULL;
} }
(*crl)->expire = 0;
return ret; return ret;
} }
@@ -1088,6 +1090,14 @@ hx509_crl_add_revoked_certs(hx509_context context,
return hx509_certs_merge(context, crl->revoked, certs); return hx509_certs_merge(context, crl->revoked, certs);
} }
int
hx509_crl_lifetime(hx509_context context, hx509_crl crl, int delta)
{
crl->expire = time(NULL) + delta;
return 0;
}
void void
hx509_crl_free(hx509_context context, hx509_crl *crl) hx509_crl_free(hx509_context context, hx509_crl *crl)
{ {
@@ -1186,8 +1196,15 @@ hx509_crl_sign(hx509_context context,
ret = ENOMEM; ret = ENOMEM;
goto out; goto out;
} }
c.tbsCertList.nextUpdate->element = choice_Time_generalTime;
c.tbsCertList.nextUpdate->u.generalTime = time(NULL) + 24 * 3600 * 365; {
time_t next = crl->expire;
if (next == 0)
next = time(NULL) + 24 * 3600 * 365;
c.tbsCertList.nextUpdate->element = choice_Time_generalTime;
c.tbsCertList.nextUpdate->u.generalTime = next;
}
c.tbsCertList.revokedCertificates = c.tbsCertList.revokedCertificates =
calloc(1, sizeof(*c.tbsCertList.revokedCertificates)); calloc(1, sizeof(*c.tbsCertList.revokedCertificates));