denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

generate debug output if ocsp response does not contain status information for a given certificate

Browse Source
This commit is contained in:
Andreas Steffen
2008-04-02 14:28:17 +00:00
parent 473eff33aa
commit 1ee637d8b1
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/credentials/credential_manager.c
+3 -2
View File
@@ -426,6 +426,7 @@ static certificate_t *get_better_ocsp(private_credential_manager_t *this,
default: default:
case VALIDATION_FAILED: case VALIDATION_FAILED:
/* candidate unusable, does not contain our cert */ /* candidate unusable, does not contain our cert */
DBG1(DBG_CFG, " ocsp response contains no status on our certificate");
cand->destroy(cand); cand->destroy(cand);
return best; return best;
} }
@@ -479,12 +480,12 @@ static cert_validation_t check_ocsp(private_credential_manager_t *this,
best = get_better_ocsp(this, current, best, subject, issuer, &valid); best = get_better_ocsp(this, current, best, subject, issuer, &valid);
if (best && valid != VALIDATION_STALE) if (best && valid != VALIDATION_STALE)
{ {
DBG1(DBG_CFG, "found cached ocsp response"); DBG1(DBG_CFG, " using cached ocsp response");
break; break;
} }
} }
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
/* derive the authorityKeyIdentifier from the issuer's public key */ /* derive the authorityKeyIdentifier from the issuer's public key */
current = &issuer->interface; current = &issuer->interface;
public = current->get_public_key(current); public = current->get_public_key(current);
src/charon/sa/tasks/ike_cert_pre.c
+1 -1
View File
@@ -97,7 +97,7 @@ static void process_certreqs(private_ike_cert_pre_t *this, message_t *message)
else else
{ {
DBG1(DBG_IKE, "received cert request for unknown ca " DBG1(DBG_IKE, "received cert request for unknown ca "
"\"%D\"", id); "with keyid %D", id);
auth->add_item(auth, AUTHN_CA_CERT_KEYID, id); auth->add_item(auth, AUTHN_CA_CERT_KEYID, id);
} }
id->destroy(id); id->destroy(id);