denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Include subject cert to temporary auth info before completing trustchain

Browse Source
This commit is contained in:
Martin Willi
2011-01-05 16:46:04 +01:00
parent 5eae41c6d8
commit 8469625fdc
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/credentials/credential_manager.c
+1 -4
View File
@@ -578,6 +578,7 @@ static bool verify_trust_chain(private_credential_manager_t *this,
auth = auth_cfg_create(); auth = auth_cfg_create();
get_key_strength(subject, auth); get_key_strength(subject, auth);
current = subject->get_ref(subject); current = subject->get_ref(subject);
auth->add(auth, AUTH_RULE_SUBJECT_CERT, current->get_ref(current));
for (pathlen = 0; pathlen <= MAX_TRUST_PATH_LEN; pathlen++) for (pathlen = 0; pathlen <= MAX_TRUST_PATH_LEN; pathlen++)
{ {
@@ -702,8 +703,6 @@ METHOD(enumerator_t, trusted_enumerate, bool,
verify_trust_chain(this->this, this->pretrusted, this->auth, verify_trust_chain(this->this, this->pretrusted, this->auth,
TRUE, this->online)) TRUE, this->online))
{ {
this->auth->add(this->auth, AUTH_RULE_SUBJECT_CERT,
this->pretrusted->get_ref(this->pretrusted));
DBG1(DBG_CFG, " using trusted certificate \"%Y\"", DBG1(DBG_CFG, " using trusted certificate \"%Y\"",
this->pretrusted->get_subject(this->pretrusted)); this->pretrusted->get_subject(this->pretrusted));
*cert = this->pretrusted; *cert = this->pretrusted;
@@ -729,8 +728,6 @@ METHOD(enumerator_t, trusted_enumerate, bool,
if (verify_trust_chain(this->this, current, this->auth, FALSE, if (verify_trust_chain(this->this, current, this->auth, FALSE,
this->online)) this->online))
{ {
this->auth->add(this->auth, AUTH_RULE_SUBJECT_CERT,
current->get_ref(current));
*cert = current; *cert = current;
if (auth) if (auth)
{ {