denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added support for OCSP responder URIs to conftest

Browse Source
This commit is contained in:
Martin Willi
2011-01-05 16:46:07 +01:00
parent 7b3740d958
commit 97d30f0010
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/conftest/conftest.c
+11 -2
View File
@@ -229,12 +229,21 @@ static void load_cdps(settings_t *settings)
enumerator_t *enumerator; enumerator_t *enumerator;
identification_t *id; identification_t *id;
char *ca, *uri, *section; char *ca, *uri, *section;
certificate_type_t type;
x509_t *x509; x509_t *x509;
enumerator = settings->create_section_enumerator(settings, "cdps"); enumerator = settings->create_section_enumerator(settings, "cdps");
while (enumerator->enumerate(enumerator, &section)) while (enumerator->enumerate(enumerator, &section))
{ {
if (!strncaseeq(section, "crl", strlen("crl"))) if (strncaseeq(section, "crl", strlen("crl")))
{
type = CERT_X509_CRL;
}
else if (strncaseeq(section, "ocsp", strlen("ocsp")))
{
type = CERT_X509_OCSP_RESPONSE;
}
else
{ {
fprintf(stderr, "unknown cdp type '%s', ignored\n", section); fprintf(stderr, "unknown cdp type '%s', ignored\n", section);
continue; continue;
@@ -256,7 +265,7 @@ static void load_cdps(settings_t *settings)
} }
id = identification_create_from_encoding(ID_KEY_ID, id = identification_create_from_encoding(ID_KEY_ID,
x509->get_subjectKeyIdentifier(x509)); x509->get_subjectKeyIdentifier(x509));
conftest->creds->add_cdp(conftest->creds, CERT_X509_CRL, id, uri); conftest->creds->add_cdp(conftest->creds, type, id, uri);
DESTROY_IF((certificate_t*)x509); DESTROY_IF((certificate_t*)x509);
id->destroy(id); id->destroy(id);
} }