denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

start ocsp checking only if there are any ocspuris present

Browse Source
This commit is contained in:
Andreas Steffen
2007-03-07 13:22:07 +00:00
parent 0d1f911065
commit dd82ca4dcc
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/crypto/ca.c
+9 -1
View File
@@ -389,6 +389,12 @@ static cert_status_t verify_by_ocsp(private_ca_info_t* this, const x509_t *cert,
pthread_mutex_lock(&(this->mutex)); pthread_mutex_lock(&(this->mutex));
/* do we support OCSP at all? */
if (this->ocspuris->get_count(this->ocspuris) == 0)
{
goto ret;
}
/* do we have a valid certinfo record for this serial number in our cache? */ /* do we have a valid certinfo record for this serial number in our cache? */
{ {
iterator_t *iterator = this->certinfos->create_iterator(this->certinfos, TRUE); iterator_t *iterator = this->certinfos->create_iterator(this->certinfos, TRUE);
@@ -411,11 +417,13 @@ static cert_status_t verify_by_ocsp(private_ca_info_t* this, const x509_t *cert,
ocsp_t *ocsp; ocsp_t *ocsp;
DBG2("ocsp status is not in cache"); DBG2("ocsp status is not in cache");
ocsp = ocsp_create(this->cacert, this->ocspuris); ocsp = ocsp_create(this->cacert, this->ocspuris);
ocsp->fetch(ocsp, certinfo); ocsp->fetch(ocsp, certinfo);
ocsp->destroy(ocsp); ocsp->destroy(ocsp);
} }
ret:
pthread_mutex_unlock(&(this->mutex)); pthread_mutex_unlock(&(this->mutex));
return certinfo->get_status(certinfo); return certinfo->get_status(certinfo);
} }