denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed crl fetching bug

Browse Source
This commit is contained in:
Andreas Steffen
2007-04-03 22:02:17 +00:00
parent 7e4f8db2bf
commit 3d62a7d225
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/crypto/ca.c
+6 -3
View File
@@ -386,7 +386,7 @@ static cert_status_t verify_by_crl(private_ca_info_t* this,
if (this->crl == NULL) if (this->crl == NULL)
{ {
stale = TRUE; stale = TRUE;
DBG1("crl not found"); DBG1("crl is not locally available");
} }
else else
{ {
@@ -449,6 +449,8 @@ static cert_status_t verify_by_crl(private_ca_info_t* this,
} }
iterator->destroy(iterator); iterator->destroy(iterator);
} }
if (this->crl)
{ {
rsa_public_key_t *issuer_public_key; rsa_public_key_t *issuer_public_key;
bool valid_signature; bool valid_signature;
@@ -461,8 +463,9 @@ static cert_status_t verify_by_crl(private_ca_info_t* this,
goto ret; goto ret;
} }
DBG2("crl signature is valid"); DBG2("crl signature is valid");
}
this->crl->get_status(this->crl, certinfo); this->crl->get_status(this->crl, certinfo);
}
ret: ret:
pthread_mutex_unlock(&(this->mutex)); pthread_mutex_unlock(&(this->mutex));