denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

discard cert if CA basic constraints flag is not set and warn if cert is not valide

Browse Source
This commit is contained in:
Andreas Steffen
2006-06-09 05:48:49 +00:00
parent a612f2dd00
commit ac427e3677
1 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/config/credentials/local_credential_store.c
+12 -1
View File
@@ -262,12 +262,23 @@ static void load_ca_certificates(private_local_credential_store_t *this, const c
{ {
cert = x509_create_from_file(file, "ca certificate"); cert = x509_create_from_file(file, "ca certificate");
if (cert) if (cert)
{
err_t ugh = cert->is_valid(cert, NULL);
if (ugh != NULL)
{
this->logger->log(this->logger, ERROR, "warning: ca certificate %s", ugh);
}
if (cert->is_ca(cert))
{ {
this->ca_certs->insert_last(this->ca_certs, (void*)cert); this->ca_certs->insert_last(this->ca_certs, (void*)cert);
} }
else else
{ {
this->logger->log(this->logger, ERROR, "certificate \"%s\" invalid, skipped", file); this->logger->log(this->logger, ERROR,
" CA basic constraints flag not set, cert discarded");
cert->destroy(cert);
}
} }
} }
} }