denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Continue without client authentication if no matching certificate found

Browse Source
This commit is contained in:
Martin Willi
2011-04-14 20:02:12 +02:00
parent 6a8f1a578f
commit 2db8b58f62
1 changed files with 22 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_peer.c
+22 -19
View File
@@ -817,39 +817,42 @@ static status_t send_certificate(private_tls_peer_t *this,
this->private = find_private_key(this); this->private = find_private_key(this);
if (!this->private) if (!this->private)
{ {
DBG1(DBG_TLS, "no TLS peer certificate found for '%Y'", this->peer); DBG1(DBG_TLS, "no TLS peer certificate found for '%Y', "
this->alert->add(this->alert, TLS_FATAL, TLS_INTERNAL_ERROR); "skipping client authentication", this->peer);
return NEED_MORE; this->peer = NULL;
} }
/* generate certificate payload */ /* generate certificate payload */
certs = tls_writer_create(256); certs = tls_writer_create(256);
cert = this->peer_auth->get(this->peer_auth, AUTH_RULE_SUBJECT_CERT); if (this->peer)
if (cert)
{ {
if (cert->get_encoding(cert, CERT_ASN1_DER, &data)) cert = this->peer_auth->get(this->peer_auth, AUTH_RULE_SUBJECT_CERT);
{ if (cert)
DBG1(DBG_TLS, "sending TLS peer certificate '%Y'",
cert->get_subject(cert));
certs->write_data24(certs, data);
free(data.ptr);
}
}
enumerator = this->peer_auth->create_enumerator(this->peer_auth);
while (enumerator->enumerate(enumerator, &rule, &cert))
{
if (rule == AUTH_RULE_IM_CERT)
{ {
if (cert->get_encoding(cert, CERT_ASN1_DER, &data)) if (cert->get_encoding(cert, CERT_ASN1_DER, &data))
{ {
DBG1(DBG_TLS, "sending TLS intermediate certificate '%Y'", DBG1(DBG_TLS, "sending TLS peer certificate '%Y'",
cert->get_subject(cert)); cert->get_subject(cert));
certs->write_data24(certs, data); certs->write_data24(certs, data);
free(data.ptr); free(data.ptr);
} }
} }
enumerator = this->peer_auth->create_enumerator(this->peer_auth);
while (enumerator->enumerate(enumerator, &rule, &cert))
{
if (rule == AUTH_RULE_IM_CERT)
{
if (cert->get_encoding(cert, CERT_ASN1_DER, &data))
{
DBG1(DBG_TLS, "sending TLS intermediate certificate '%Y'",
cert->get_subject(cert));
certs->write_data24(certs, data);
free(data.ptr);
}
}
}
enumerator->destroy(enumerator);
} }
enumerator->destroy(enumerator);
writer->write_data24(writer, certs->get_buf(certs)); writer->write_data24(writer, certs->get_buf(certs));
certs->destroy(certs); certs->destroy(certs);