generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Support setting of "no purpose" for trust.

Browse Source 
If the oid parameter is set to NULL in X509_add1_trust_object
create an empty list of trusted purposes corresponding to
"no purpose" if trust is checked.
This commit is contained in:
Dr. Stephen Henson 2013-11-11 14:40:55 +00:00
parent 5fad2c93bc
commit 85c9ba2342
1 changed files with 19 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
crypto/asn1/x_x509a.c
View File

@ -135,15 +135,26 @@ unsigned char *X509_keyid_get0(X509 *x, int *len)
}
int X509_add1_trust_object(X509 *x, ASN1_OBJECT *obj)
{
{
X509_CERT_AUX *aux;
ASN1_OBJECT *objtmp;
if(!(objtmp = OBJ_dup(obj))) return 0;
if(!(aux = aux_get(x))) return 0;
if(!aux->trust
&& !(aux->trust = sk_ASN1_OBJECT_new_null())) return 0;
return sk_ASN1_OBJECT_push(aux->trust, objtmp);
}
ASN1_OBJECT *objtmp = NULL;
if (obj)
{
objtmp = OBJ_dup(obj);
if (!objtmp)
return 0;
}
if(!(aux = aux_get(x)))
goto err;
if(!aux->trust && !(aux->trust = sk_ASN1_OBJECT_new_null()))
goto err;
if (!objtmp || sk_ASN1_OBJECT_push(aux->trust, objtmp))
return 1;
err:
if (objtmp)
ASN1_OBJECT_free(objtmp);
return 0;
}
int X509_add1_reject_object(X509 *x, ASN1_OBJECT *obj)
{