Respect enforce_critical setting in x509 plugin CRLs

2011-01-05 16:46:03 +01:00
parent d14d3b31b8
commit 51b7e9ce72
1 changed files with 8 additions and 0 deletions
@@ -289,6 +289,14 @@ static bool parse(private_x509_crl_t *this)
 						this->crlNumber = object;
 						break;
 					default:
+						if (critical && lib->settings->get_bool(lib->settings,
+							"libstrongswan.plugins.x509.enforce_critical", FALSE))
+						{
+							DBG1(DBG_LIB, "critical %s extension not supported",
+								 (extn_oid == OID_UNKNOWN) ? "unknown" :
+								 (char*)oid_names[extn_oid].name);
+							goto end;
+						}
 						break;
 				}
 				break;