denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Unwrap crlNumber INTEGER in openssl CRL parsing

Browse Source
This commit is contained in:
Martin Willi
2010-08-30 11:23:46 +02:00
parent 21f80e9dbc
commit 2291754ddf
1 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_crl.c
+13 -4
View File
@@ -416,10 +416,19 @@ static bool parse_authKeyIdentifier_ext(private_openssl_crl_t *this,
static bool parse_crlNumber_ext(private_openssl_crl_t *this, static bool parse_crlNumber_ext(private_openssl_crl_t *this,
X509_EXTENSION *ext) X509_EXTENSION *ext)
{ {
free(this->serial.ptr); chunk_t chunk;
this->serial = chunk_clone(
openssl_asn1_str2chunk(X509_EXTENSION_get_data(ext))); chunk = openssl_asn1_str2chunk(X509_EXTENSION_get_data(ext));
return this->serial.len != 0; /* quick and dirty INTEGER unwrap */
if (chunk.len > 1 && chunk.ptr[0] == V_ASN1_INTEGER &&
chunk.ptr[1] == chunk.len - 2)
{
chunk = chunk_skip(chunk, 2);
free(this->serial.ptr);
this->serial = chunk_clone(chunk);
return TRUE;
}
return FALSE;
} }
/** /**