denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

beautified AIK verification

Browse Source
This commit is contained in:
Andreas Steffen
2011-09-08 12:20:58 +02:00
parent 582bda55dd
commit 35fbe4a5e6
1 changed files with 15 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libimcv/plugins/imv_attestation/imv_attestation.c
+15 -8
View File
@@ -453,6 +453,7 @@ TNC_Result TNC_IMV_ReceiveMessage(TNC_IMVID imv_id,
tcg_pts_attr_aik_t *attr_cast; tcg_pts_attr_aik_t *attr_cast;
certificate_t *aik, *issuer; certificate_t *aik, *issuer;
enumerator_t *e; enumerator_t *e;
bool trusted = FALSE;
attr_cast = (tcg_pts_attr_aik_t*)attr; attr_cast = (tcg_pts_attr_aik_t*)attr;
aik = attr_cast->get_aik(attr_cast); aik = attr_cast->get_aik(attr_cast);
@@ -461,18 +462,24 @@ TNC_Result TNC_IMV_ReceiveMessage(TNC_IMVID imv_id,
/* TODO generate error attribute */ /* TODO generate error attribute */
break; break;
} }
pts->set_aik(pts, aik); if (aik->get_type(aik) == CERT_X509)
e = pts_credmgr->create_trusted_enumerator(pts_credmgr,
KEY_ANY, aik->get_issuer(aik), FALSE);
while (e->enumerate(e, &issuer))
{ {
if (aik->issued_by(aik, issuer)) DBG1(DBG_IMV, "verifying AIK certificate");
e = pts_credmgr->create_trusted_enumerator(pts_credmgr,
KEY_ANY, aik->get_issuer(aik), FALSE);
while (e->enumerate(e, &issuer))
{ {
DBG1(DBG_IMV, "AIK certificate is trusted"); if (aik->issued_by(aik, issuer))
break; {
trusted = TRUE;
break;
}
} }
e->destroy(e);
DBG1(DBG_IMV, "AIK certificate is %strusted",
trusted ? "" : "not ");
} }
e->destroy(e); pts->set_aik(pts, aik);
break; break;
} }