denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev2: Cache all received attribute certificates to auth config

Browse Source
This commit is contained in:
Martin Willi
2014-03-31 11:14:59 +02:00
parent d417900335
commit 3a2deb98bc
1 changed files with 27 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
+27 -1
View File
@@ -259,6 +259,30 @@ static void process_crl(cert_payload_t *payload, auth_cfg_t *auth)
} }
} }
/**
* Process an attribute certificate payload
*/
static void process_ac(cert_payload_t *payload, auth_cfg_t *auth)
{
certificate_t *cert;
cert = payload->get_cert(payload);
if (cert)
{
if (cert->get_issuer(cert))
{
DBG1(DBG_IKE, "received attribute certificate issued by \"%Y\"",
cert->get_issuer(cert));
}
else if (cert->get_subject(cert))
{
DBG1(DBG_IKE, "received attribute certificate for \"%Y\"",
cert->get_subject(cert));
}
auth->add(auth, AUTH_HELPER_AC_CERT, cert);
}
}
/** /**
* Process certificate payloads * Process certificate payloads
*/ */
@@ -298,13 +322,15 @@ static void process_certs(private_ike_cert_pre_t *this, message_t *message)
case ENC_CRL: case ENC_CRL:
process_crl(cert_payload, auth); process_crl(cert_payload, auth);
break; break;
case ENC_X509_ATTRIBUTE:
process_ac(cert_payload, auth);
break;
case ENC_PKCS7_WRAPPED_X509: case ENC_PKCS7_WRAPPED_X509:
case ENC_PGP: case ENC_PGP:
case ENC_DNS_SIGNED_KEY: case ENC_DNS_SIGNED_KEY:
case ENC_KERBEROS_TOKEN: case ENC_KERBEROS_TOKEN:
case ENC_ARL: case ENC_ARL:
case ENC_SPKI: case ENC_SPKI:
case ENC_X509_ATTRIBUTE:
case ENC_RAW_RSA_KEY: case ENC_RAW_RSA_KEY:
case ENC_X509_HASH_AND_URL_BUNDLE: case ENC_X509_HASH_AND_URL_BUNDLE:
case ENC_OCSP_CONTENT: case ENC_OCSP_CONTENT: