denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension

Browse Source
This commit is contained in:
Andreas Steffen
2009-12-22 13:18:27 +01:00
parent 91e35b7c9e
commit e16a01a5e6
2 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/credentials/certificates/x509.h
+8 -6
View File
@@ -35,17 +35,19 @@ typedef enum x509_flag_t x509_flag_t;
*/ */
enum x509_flag_t { enum x509_flag_t {
/** cert has no constraints */ /** cert has no constraints */
X509_NONE = 0, X509_NONE = 0,
/** cert has CA constraint */ /** cert has CA constraint */
X509_CA = (1<<0), X509_CA = (1<<0),
/** cert has AA constraint */ /** cert has AA constraint */
X509_AA = (1<<1), X509_AA = (1<<1),
/** cert has OCSP signer constraint */ /** cert has OCSP signer constraint */
X509_OCSP_SIGNER = (1<<2), X509_OCSP_SIGNER = (1<<2),
/** cert has serverAuth constraint */ /** cert has serverAuth constraint */
X509_SERVER_AUTH = (1<<3), X509_SERVER_AUTH = (1<<3),
/** cert is self-signed */ /** cert is self-signed */
X509_SELF_SIGNED = (1<<4), X509_SELF_SIGNED = (1<<4),
/** cert has an ipAddrBlocks extension */
X509_IP_ADDR_BLOCKS = (1<<5),
}; };
/** /**
src/libstrongswan/plugins/x509/x509_cert.c
+2 -1
View File
@@ -803,7 +803,8 @@ static void parse_ipAddrBlocks(chunk_t blob, int level0,
break; break;
} }
} }
this->flags |= X509_IP_ADDR_BLOCKS;
end: end:
parser->destroy(parser); parser->destroy(parser);
} }