denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

constraints: Fallback to binary OIDs in log messages

Browse Source 
Similar to the previous commit.
This commit is contained in:
Tobias Brunner
2026-07-24 08:47:36 +02:00
parent a5d815a6ef
commit 75baeb9f35
1 changed files with 23 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/constraints/constraints_validator.c
+23 -6
View File
@@ -697,9 +697,18 @@ static bool check_policy(x509_t *subject, x509_t *issuer)
if (!has_policy(issuer, mapping->issuer)) if (!has_policy(issuer, mapping->issuer))
{ {
oid = asn1_oid_to_string(mapping->issuer); oid = asn1_oid_to_string(mapping->issuer);
DBG1(DBG_CFG, "certificate '%Y' maps policy from %s, but issuer " if (oid)
"misses it", cert->get_subject(cert), oid); {
free(oid); DBG1(DBG_CFG, "certificate '%Y' maps policy from %s, but "
"issuer misses it", cert->get_subject(cert), oid);
free(oid);
}
else
{
DBG1(DBG_CFG, "certificate '%Y' maps policy from %#B, but "
"issuer misses it", cert->get_subject(cert),
&mapping->issuer);
}
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
return FALSE; return FALSE;
} }
@@ -712,9 +721,17 @@ static bool check_policy(x509_t *subject, x509_t *issuer)
if (!has_policy(issuer, policy->oid)) if (!has_policy(issuer, policy->oid))
{ {
oid = asn1_oid_to_string(policy->oid); oid = asn1_oid_to_string(policy->oid);
DBG1(DBG_CFG, "policy %s missing in issuing certificate '%Y'", if (oid)
oid, cert->get_issuer(cert)); {
free(oid); DBG1(DBG_CFG, "policy %s missing in issuing certificate '%Y'",
oid, cert->get_issuer(cert));
free(oid);
}
else
{
DBG1(DBG_CFG, "policy %#B missing in issuing certificate '%Y'",
&policy->oid, cert->get_issuer(cert));
}
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
return FALSE; return FALSE;
} }