denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openssl: Add support for IP address nameConstraints

Browse Source
This commit is contained in:
Tobias Brunner
2023-11-13 12:23:33 +01:00
parent ede96fe3db
commit 1c3096fe50
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_x509.c
+10
View File
@@ -224,10 +224,20 @@ static identification_t *general_name2id(GENERAL_NAME *name)
{ {
return identification_create_from_encoding(ID_IPV4_ADDR, chunk); return identification_create_from_encoding(ID_IPV4_ADDR, chunk);
} }
if (chunk.len == 8)
{
return identification_create_from_encoding(ID_IPV4_ADDR_SUBNET,
chunk);
}
if (chunk.len == 16) if (chunk.len == 16)
{ {
return identification_create_from_encoding(ID_IPV6_ADDR, chunk); return identification_create_from_encoding(ID_IPV6_ADDR, chunk);
} }
if (chunk.len == 32)
{
return identification_create_from_encoding(ID_IPV6_ADDR_SUBNET,
chunk);
}
return NULL; return NULL;
} }
case GEN_DIRNAME : case GEN_DIRNAME :