denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate a load-tester certificate only for DN or subjectAltName identities

Browse Source
This commit is contained in:
Martin Willi
2012-10-16 13:43:54 +02:00
parent db97d67825
commit c1024a6bd6
1 changed files with 17 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/load_tester/load_tester_creds.c
+17 -7
View File
@@ -347,15 +347,25 @@ METHOD(credential_set_t, create_cert_enumerator, enumerator_t*,
/* peer certificate, generate on demand */
serial = htonl(++this->serial);
now = time(NULL);
sans = linked_list_create();
if (id->get_type(id) != ID_DER_ASN1_DN)
{ /* encode as subjectAltName, construct a sane DN */
sans->insert_last(sans, id);
snprintf(buf, sizeof(buf), "CN=%Y", id);
dn = identification_create_from_string(buf);
}
switch (id->get_type(id))
{
case ID_DER_ASN1_DN:
break;
case ID_FQDN:
case ID_RFC822_ADDR:
case ID_IPV4_ADDR:
case ID_IPV6_ADDR:
/* encode as subjectAltName, construct a sane DN */
sans->insert_last(sans, id);
snprintf(buf, sizeof(buf), "CN=%Y", id);
dn = identification_create_from_string(buf);
break;
default:
sans->destroy(sans);
return NULL;
}
peer_key = this->private->get_public_key(this->private);
peer_cert = lib->creds->create(lib->creds, CRED_CERTIFICATE, CERT_X509,
BUILD_SIGNING_KEY, this->private,