oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(check_key_usage): tell what keyusages are missing

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19279 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-12-07 22:35:27 +00:00
parent d987d9258d
commit eecdea2e20
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
lib/hx509/cert.c
View File

@@ -552,8 +552,15 @@ check_key_usage(hx509_context context, const Certificate *cert,
return ret; return ret;
ku_flags = KeyUsage2int(ku); ku_flags = KeyUsage2int(ku);
if ((ku_flags & flags) != flags) { if ((ku_flags & flags) != flags) {
unsigned missing = (~ku_flags) & flags;
char buf[256], *name;
unparse_flags(missing, asn1_KeyUsage_units(), buf, sizeof(buf));
_hx509_unparse_Name(&cert->tbsCertificate.issuer, &name);
hx509_set_error_string(context, 0, HX509_KU_CERT_MISSING, hx509_set_error_string(context, 0, HX509_KU_CERT_MISSING,
"Key usage missing from certifiate"); "Key usage %s required but missing "
"from certifiate %s", buf, name);
free(name);
return HX509_KU_CERT_MISSING; return HX509_KU_CERT_MISSING;
} }
return 0; return 0;