denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

self-signed certificates were not marked by x509_cert.c

Browse Source
This commit is contained in:
Andreas Steffen
2008-03-21 19:07:12 +00:00
parent c081a9bfe6
commit ffce5db1b7
1 changed files with 22 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/x509/x509_cert.c
+22 -14
View File
@@ -940,22 +940,27 @@ static bool issued_by(private_x509_cert_t *this, certificate_t *issuer,
bool valid; bool valid;
x509_t *x509 = (x509_t*)issuer; x509_t *x509 = (x509_t*)issuer;
if (&this->public.interface.interface == issuer && if (&this->public.interface.interface == issuer)
(this->flags & X509_SELF_SIGNED))
{ {
return TRUE; if (this->flags & X509_SELF_SIGNED)
{
return TRUE;
}
} }
if (issuer->get_type(issuer) != CERT_X509) else
{ {
return FALSE; if (issuer->get_type(issuer) != CERT_X509)
} {
if (!this->issuer->equals(this->issuer, issuer->get_subject(issuer))) return FALSE;
{ }
return FALSE; if (!this->issuer->equals(this->issuer, issuer->get_subject(issuer)))
} {
if (!(x509->get_flags(x509) & X509_CA)) return FALSE;
{ }
return FALSE; if (!(x509->get_flags(x509) & X509_CA))
{
return FALSE;
}
} }
if (!sigcheck) if (!sigcheck)
{ {
@@ -1202,7 +1207,10 @@ static private_x509_cert_t *load(chunk_t chunk)
destroy(this); destroy(this);
return NULL; return NULL;
} }
if (issued_by(this, &this->public.interface.interface, FALSE))
/* check if the certificate self-signed */
if (this->subject->equals(this->subject, this->issuer) &&
issued_by(this, &this->public.interface.interface, TRUE))
{ {
this->flags |= X509_SELF_SIGNED; this->flags |= X509_SELF_SIGNED;
} }