revocation: Set defaults if CRL/OCSP checking is disabled in config

2018-05-22 09:50:47 +02:00
parent b00d3adbd1
commit cae43b890a
1 changed files with 9 additions and 0 deletions
@@ -824,6 +824,10 @@ METHOD(cert_validator_t, validate, bool,
 					break;
 			}
 		}
+		else
+		{
+			auth->add(auth, AUTH_RULE_OCSP_VALIDATION, VALIDATION_SKIPPED);
+		}

 		if (this->enable_crl)
 		{
@@ -847,6 +851,11 @@ METHOD(cert_validator_t, validate, bool,
 					break;
 			}
 		}
+		else
+		{
+			auth->add(auth, AUTH_RULE_CRL_VALIDATION,
+					  auth->get(auth, AUTH_RULE_OCSP_VALIDATION));
+		}

 		lib->credmgr->call_hook(lib->credmgr, CRED_HOOK_VALIDATION_FAILED,
 								subject);