denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openssl: Properly handle flags in key usage extension

Browse Source
This commit is contained in:
Tobias Brunner
2017-06-14 10:03:13 +02:00
parent dad4f6a178
commit e793d65acd
1 changed files with 6 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_x509.c
+6 -8
View File
@@ -686,15 +686,13 @@ static bool parse_keyUsage_ext(private_openssl_x509_t *this,
{ {
flags |= usage->data[1] << 8; flags |= usage->data[1] << 8;
} }
switch (flags) if (flags & X509v3_KU_CRL_SIGN)
{ {
case X509v3_KU_CRL_SIGN: this->flags |= X509_CRL_SIGN;
this->flags |= X509_CRL_SIGN; }
break; if (flags & X509v3_KU_KEY_CERT_SIGN)
case X509v3_KU_KEY_CERT_SIGN: {
/* we use the caBasicContraint, MUST be set */ /* we use the caBasicContraint, MUST be set */
default:
break;
} }
} }
ASN1_BIT_STRING_free(usage); ASN1_BIT_STRING_free(usage);