cert-validator: Use a separate method for online revocation checking

This avoids having to repeat offline checks after basic trust chain
validation.
This commit is contained in:
Tobias Brunner
2022-10-03 10:48:46 +02:00
parent 1968615590
commit 1f870ae189
7 changed files with 67 additions and 30 deletions
@@ -136,9 +136,8 @@ static bool add_entry(private_coupling_validator_t *this, char *hash,
}
METHOD(cert_validator_t, validate, bool,
private_coupling_validator_t *this,
certificate_t *subject, certificate_t *issuer,
bool online, u_int pathlen, bool anchor, auth_cfg_t *auth)
private_coupling_validator_t *this, certificate_t *subject,
certificate_t *issuer, u_int pathlen, bool anchor, auth_cfg_t *auth)
{
bool valid = FALSE;
char hash[MAX_HASH_SIZE];