denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libtls: call create_public_enumerator() with key_type

Browse Source
This commit is contained in:
Andreas Steffen
2022-08-26 12:17:22 +02:00
parent a417703301
commit 63fd718915
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_server.c
+8 -1
View File
@@ -176,14 +176,21 @@ public_key_t *tls_find_public_key(auth_cfg_t *peer_auth, identification_t *id)
{ {
public_key_t *public = NULL, *current; public_key_t *public = NULL, *current;
certificate_t *cert, *found; certificate_t *cert, *found;
key_type_t key_type = KEY_ANY;
enumerator_t *enumerator; enumerator_t *enumerator;
auth_cfg_t *auth; auth_cfg_t *auth;
cert = peer_auth->get(peer_auth, AUTH_HELPER_SUBJECT_CERT); cert = peer_auth->get(peer_auth, AUTH_HELPER_SUBJECT_CERT);
if (cert) if (cert)
{ {
public = cert->get_public_key(cert);
if (public)
{
key_type = public->get_type(public);
public->destroy(public);
}
enumerator = lib->credmgr->create_public_enumerator(lib->credmgr, enumerator = lib->credmgr->create_public_enumerator(lib->credmgr,
KEY_ANY, id, peer_auth, TRUE); key_type, id, peer_auth, TRUE);
while (enumerator->enumerate(enumerator, &current, &auth)) while (enumerator->enumerate(enumerator, &current, &auth))
{ {
found = auth->get(auth, AUTH_RULE_SUBJECT_CERT); found = auth->get(auth, AUTH_RULE_SUBJECT_CERT);