denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

additional debug line makes certificate status checking more understandable

Browse Source
This commit is contained in:
Andreas Steffen
2008-04-02 06:25:59 +00:00
parent 9372f44c67
commit 281d04502e
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/credentials/credential_manager.c
+6 -1
View File
@@ -692,7 +692,7 @@ static cert_validation_t check_crl(private_credential_manager_t *this,
best = get_better_crl(this, current, best, subject, issuer, &valid); best = get_better_crl(this, current, best, subject, issuer, &valid);
if (best && valid != VALIDATION_STALE) if (best && valid != VALIDATION_STALE)
{ {
DBG1(DBG_CFG, "found cached crl"); DBG1(DBG_CFG, " using cached crl");
break; break;
} }
} }
@@ -777,6 +777,11 @@ static bool check_certificate(private_credential_manager_t *this,
if (issuer->get_type(issuer) == CERT_X509 && if (issuer->get_type(issuer) == CERT_X509 &&
subject->get_type(subject) == CERT_X509) subject->get_type(subject) == CERT_X509)
{ {
if (ocsp || crl)
{
DBG1(DBG_CFG, "checking certificate status of \"%D\"",
subject->get_subject(subject));
}
if (ocsp) if (ocsp)
{ {
switch (check_ocsp(this, (x509_t*)subject, (x509_t*)issuer, auth)) switch (check_ocsp(this, (x509_t*)subject, (x509_t*)issuer, auth))