From 500cacf6d89bcc6b218b3d1609092028883c742c Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 9 Nov 2023 12:42:54 +0100 Subject: [PATCH 1/2] x509: Add support to encode SANs of type uniformResourceIdentifier --- src/libstrongswan/plugins/x509/x509_cert.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/libstrongswan/plugins/x509/x509_cert.c b/src/libstrongswan/plugins/x509/x509_cert.c index bdada3381..296a1a333 100644 --- a/src/libstrongswan/plugins/x509/x509_cert.c +++ b/src/libstrongswan/plugins/x509/x509_cert.c @@ -2069,6 +2069,9 @@ static chunk_t build_generalName(identification_t *id) case ID_DER_ASN1_DN: context = ASN1_CONTEXT_C_4; break; + case ID_DER_ASN1_GN_URI: + context = ASN1_CONTEXT_S_6; + break; case ID_IPV4_ADDR: case ID_IPV6_ADDR: case ID_IPV4_ADDR_SUBNET: From 9c2ca27b62ba8117f44418c733f62c29275f78b1 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 9 Nov 2023 12:43:44 +0100 Subject: [PATCH 2/2] identification: Support explicit uri: prefix for SANs of type uniformResourceIdentifier --- src/libstrongswan/utils/identification.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libstrongswan/utils/identification.c b/src/libstrongswan/utils/identification.c index 6ddaf6c3e..9a8f3200e 100644 --- a/src/libstrongswan/utils/identification.c +++ b/src/libstrongswan/utils/identification.c @@ -1441,6 +1441,7 @@ static private_identification_t* create_from_string_with_prefix_type(char *str) { "asn1gn:", ID_DER_ASN1_GN }, { "xmppaddr:", ID_DER_ASN1_GN }, { "keyid:", ID_KEY_ID }, + { "uri:", ID_DER_ASN1_GN_URI }, }; private_identification_t *this; int i;