Added support for policyConstraints to x509 plugin

src/libstrongswan/credentials/builder.c

@@ -48,6 +48,8 @@ ENUM(builder_part_names, BUILD_FROM_FILE, BUILD_END,
 	"BUILD_EXCLUDED_NAME_CONSTRAINTS",
 	"BUILD_CERTIFICATE_POLICIES",
 	"BUILD_POLICY_MAPPINGS",
+	"BUILD_POLICY_CONSTRAINT_EXPLICIT",
+	"BUILD_POLICY_CONSTRAINT_INHIBIT",
 	"BUILD_X509_FLAG",
 	"BUILD_REVOKED_ENUMERATOR",
 	"BUILD_CHALLENGE_PWD",

src/libstrongswan/credentials/builder.h

@@ -103,6 +103,10 @@ enum builder_part_t {
 	BUILD_CERTIFICATE_POLICIES,
 	/** policyMapping OIDs, linked_list_t* of x509_policy_mapping_t* */
 	BUILD_POLICY_MAPPINGS,
+	/** requireExplicitPolicy constraint, int */
+	BUILD_POLICY_CONSTRAINT_EXPLICIT,
+	/** inhibitPolicyMapping constraint, int */
+	BUILD_POLICY_CONSTRAINT_INHIBIT,
 	/** enforce an additional X509 flag, x509_flag_t */
 	BUILD_X509_FLAG,
 	/** enumerator_t over (chunk_t serial, time_t date, crl_reason_t reason) */

src/libstrongswan/credentials/certificates/x509.h

@@ -121,10 +121,18 @@ struct x509_t {
 	/**
 	 * Get an optional path length constraint.
 	 *
-	 * @return			pathLenConstraint, -1 if no constraint exists
+	 * @return			pathLenConstraint, X509_NO_CONSTRAINT if none found
 	 */
 	int (*get_pathLenConstraint)(x509_t *this);
 
+	/**
+	 * Get a policyConstraint, inhibitPolicyMapping or requireExplicitPolicy.
+	 *
+	 * @param inhibit	TRUE to get inhibitPolicyMapping
+	 * @return			constraint, X509_NO_CONSTRAINT if none found
+	 */
+	int (*get_policyConstraint)(x509_t *this, bool inhibit);
+
 	/**
 	 * Create an enumerator over all subjectAltNames.
 	 *
@@ -174,6 +182,8 @@ struct x509_t {
 	 * @return			enumerator over x509_policy_mapping
 	 */
 	enumerator_t* (*create_policy_mapping_enumerator)(x509_t *this);
+
+
 };
 
 #endif /** X509_H_ @}*/