denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

x509 plugin supports encoding of CA basicConstraint extension

Browse Source
This commit is contained in:
Martin Willi
2009-09-08 10:38:02 +02:00
parent 58f34613e0
commit 8ab900dee9
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/x509/x509_cert.c
+22
View File
@@ -1209,6 +1209,7 @@ struct private_builder_t {
static bool generate(private_builder_t *this) static bool generate(private_builder_t *this)
{ {
chunk_t extensions = chunk_empty; chunk_t extensions = chunk_empty;
chunk_t basicConstraints = chunk_empty, subjectAltNames = chunk_empty;
identification_t *issuer, *subject; identification_t *issuer, *subject;
chunk_t key_info; chunk_t key_info;
signature_scheme_t scheme; signature_scheme_t scheme;
@@ -1300,10 +1301,31 @@ static bool generate(private_builder_t *this)
{ {
return FALSE; return FALSE;
} }
if (this->cert->subjectAltNames->get_count(this->cert->subjectAltNames)) if (this->cert->subjectAltNames->get_count(this->cert->subjectAltNames))
{ {
/* TODO: encode subjectAltNames */ /* TODO: encode subjectAltNames */
} }
if (this->flags & X509_CA)
{
chunk_t yes;
yes = chunk_alloca(1);
yes.ptr[0] = 0xFF;
basicConstraints = asn1_wrap(ASN1_SEQUENCE, "mmm",
asn1_build_known_oid(OID_BASIC_CONSTRAINTS),
asn1_wrap(ASN1_BOOLEAN, "c", yes),
asn1_wrap(ASN1_OCTET_STRING, "m",
asn1_wrap(ASN1_SEQUENCE, "m",
asn1_wrap(ASN1_BOOLEAN, "c", yes))));
}
if (basicConstraints.ptr || subjectAltNames.ptr)
{
extensions = asn1_wrap(ASN1_CONTEXT_C_3, "m",
asn1_wrap(ASN1_SEQUENCE, "mm",
basicConstraints, subjectAltNames));
}
this->cert->tbsCertificate = asn1_wrap(ASN1_SEQUENCE, "mmmcmcmm", this->cert->tbsCertificate = asn1_wrap(ASN1_SEQUENCE, "mmmcmcmm",
asn1_simple_object(ASN1_CONTEXT_C_0, ASN1_INTEGER_2), asn1_simple_object(ASN1_CONTEXT_C_0, ASN1_INTEGER_2),