denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

implemented dynamic http-based CRL fetching

Browse Source
This commit is contained in:
Andreas Steffen
2007-04-03 21:11:23 +00:00
parent 5d6dc162f2
commit a0eaa59b50
1 changed files with 3 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/config/credentials/local_credential_store.c
+3 -8
View File
@@ -660,12 +660,12 @@ static bool verify(private_local_credential_store_t *this, x509_t *cert, bool *f
}
/* first check certificate revocation using ocsp */
status = issuer->verify_by_ocsp(issuer, cert, certinfo, &this->public.credential_store);
status = issuer->verify_by_ocsp(issuer, certinfo, &this->public.credential_store);
/* if ocsp service is not available then fall back to crl */
if ((status == CERT_UNDEFINED) || (status == CERT_UNKNOWN && this->strict))
{
status = issuer->verify_by_crl(issuer, cert, certinfo);
status = issuer->verify_by_crl(issuer, certinfo);
}
nextUpdate = certinfo->get_nextUpdate(certinfo);
@@ -1097,12 +1097,7 @@ static void load_crls(private_local_credential_store_t *this)
crl = crl_create_from_file(file);
if (crl)
{
err_t ugh = crl->is_valid(crl, NULL, this->strict);
if (ugh != NULL)
{
DBG1(DBG_CFG, " warning: crl %s", ugh);
}
DBG1(DBG_CFG, "crl is %s", crl->is_valid(crl)? "valid":"stale");
add_crl(this, crl);
}
}