denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Attribute certificates are not trusted

Browse Source
This commit is contained in:
Tobias Brunner
2015-11-12 14:45:43 +01:00
parent e5e352e631
commit 176c24b8e1
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/vici_cred.c
+3 -1
View File
@@ -71,6 +71,7 @@ CALLBACK(load_cert, vici_message_t*,
certificate_t *cert; certificate_t *cert;
x509_t *x509; x509_t *x509;
chunk_t data; chunk_t data;
bool trusted = TRUE;
char *str; char *str;
str = message->get_str(message, NULL, "type"); str = message->get_str(message, NULL, "type");
@@ -99,6 +100,7 @@ CALLBACK(load_cert, vici_message_t*,
else if (strcaseeq(str, "x509ac")) else if (strcaseeq(str, "x509ac"))
{ {
type = CERT_X509_AC; type = CERT_X509_AC;
trusted = FALSE;
} }
else else
{ {
@@ -137,7 +139,7 @@ CALLBACK(load_cert, vici_message_t*,
} }
else else
{ {
this->creds->add_cert(this->creds, TRUE, cert); this->creds->add_cert(this->creds, trusted, cert);
} }
return create_reply(NULL); return create_reply(NULL);
} }