denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed nextUpdate and until behaviour in the non-strict case

Browse Source
This commit is contained in:
Andreas Steffen
2007-05-19 19:46:13 +00:00
parent 4756b7aa5d
commit 3388e7674d
1 changed files with 8 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/config/credentials/local_credential_store.c
+8 -10
View File
@@ -618,8 +618,6 @@ static bool verify(private_local_credential_store_t *this, x509_t *cert, bool *f
cert_status_t status; cert_status_t status;
certinfo_t *certinfo = certinfo_create(cert->get_serialNumber(cert)); certinfo_t *certinfo = certinfo_create(cert->get_serialNumber(cert));
certinfo->set_nextUpdate(certinfo, until);
if (pathlen == 0) if (pathlen == 0)
{ {
/* add any crl and ocsp uris contained in the certificate under test */ /* add any crl and ocsp uris contained in the certificate under test */
@@ -645,8 +643,14 @@ static bool verify(private_local_credential_store_t *this, x509_t *cert, bool *f
switch (status) switch (status)
{ {
case CERT_GOOD: case CERT_GOOD:
/* set nextUpdate */ /* with strict crl policy the public key must have the same
cert->set_until(cert, nextUpdate); * lifetime as the validity of the ocsp status or crl lifetime
*/
if (strict)
{
cert->set_until(cert, nextUpdate);
until = (nextUpdate < until)? nextUpdate : until;
}
/* if status information is stale */ /* if status information is stale */
if (strict && nextUpdate < time(NULL)) if (strict && nextUpdate < time(NULL))
@@ -656,12 +660,6 @@ static bool verify(private_local_credential_store_t *this, x509_t *cert, bool *f
return FALSE; return FALSE;
} }
DBG1(DBG_CFG, "certificate is good"); DBG1(DBG_CFG, "certificate is good");
/* with strict crl policy the public key must have the same
* lifetime as the validity of the ocsp status or crl lifetime
*/
if (strict && nextUpdate < until)
until = nextUpdate;
break; break;
case CERT_REVOKED: case CERT_REVOKED:
{ {