denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

support cachecrls=yes

Browse Source
This commit is contained in:
Andreas Steffen
2007-04-05 17:07:14 +00:00
parent e58afb1a0a
commit 8883eef7b8
9 changed files with 169 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/config/credentials/local_credential_store.c
+13 -5
View File
@@ -665,7 +665,7 @@ static bool verify(private_local_credential_store_t *this, x509_t *cert, bool *f
/* if ocsp service is not available then fall back to crl */
if ((status == CERT_UNDEFINED) || (status == CERT_UNKNOWN && this->strict))
{
status = issuer->verify_by_crl(issuer, certinfo);
status = issuer->verify_by_crl(issuer, certinfo, CRL_DIR);
}
nextUpdate = certinfo->get_nextUpdate(certinfo);
@@ -1038,7 +1038,7 @@ static void load_ocsp_certificates(private_local_credential_store_t *this)
/**
* Add the latest crl to the issuing ca
*/
static void add_crl(private_local_credential_store_t *this, crl_t *crl)
static void add_crl(private_local_credential_store_t *this, crl_t *crl, const char *path)
{
iterator_t *iterator = this->ca_infos->create_iterator(this->ca_infos, TRUE);
ca_info_t *ca_info;
@@ -1048,8 +1048,16 @@ static void add_crl(private_local_credential_store_t *this, crl_t *crl)
{
if (ca_info->is_crl_issuer(ca_info, crl))
{
found = TRUE;
char buffer[BUF_LEN];
chunk_t uri = { buffer, 7 + strlen(path) };
ca_info->add_crl(ca_info, crl);
if (uri.len < BUF_LEN)
{
snprintf(buffer, BUF_LEN, "file://%s", path);
ca_info->add_crluri(ca_info, uri);
}
found = TRUE;
break;
}
}
@@ -1097,8 +1105,8 @@ static void load_crls(private_local_credential_store_t *this)
crl = crl_create_from_file(file);
if (crl)
{
DBG1(DBG_CFG, "crl is %s", crl->is_valid(crl)? "valid":"stale");
add_crl(this, crl);
DBG1(DBG_CFG, " crl is %s", crl->is_valid(crl)? "valid":"stale");
add_crl(this, crl, file);
}
}
}