Fix CRL printing to correctly show when there are no revoked certificates.
Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
This commit is contained in:
parent
e306892994
commit
ccb08f98ae
5
CHANGES
5
CHANGES
@ -3,6 +3,11 @@
|
|||||||
|
|
||||||
Changes between 0.9.6 and 0.9.7 [xx XXX 2000]
|
Changes between 0.9.6 and 0.9.7 [xx XXX 2000]
|
||||||
|
|
||||||
|
*) Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string()
|
||||||
|
set string type: to handle setting ASN1_TIME structures. Fix ca
|
||||||
|
utility to correctly initialize revocation date of CRLs.
|
||||||
|
[Steve Henson]
|
||||||
|
|
||||||
*) New option SSL_OP_CIPHER_SERVER_PREFERENCE allows the server to override
|
*) New option SSL_OP_CIPHER_SERVER_PREFERENCE allows the server to override
|
||||||
the clients preferred ciphersuites and rather use its own preferences.
|
the clients preferred ciphersuites and rather use its own preferences.
|
||||||
Should help to work around M$ SGC (Server Gated Cryptography) bug in
|
Should help to work around M$ SGC (Server Gated Cryptography) bug in
|
||||||
|
@ -1379,10 +1379,9 @@ bad:
|
|||||||
if (pp[DB_type][0] == DB_TYPE_REV)
|
if (pp[DB_type][0] == DB_TYPE_REV)
|
||||||
{
|
{
|
||||||
if ((r=X509_REVOKED_new()) == NULL) goto err;
|
if ((r=X509_REVOKED_new()) == NULL) goto err;
|
||||||
ASN1_STRING_set((ASN1_STRING *)
|
if (!ASN1_UTCTIME_set_string(r->revocationDate,
|
||||||
r->revocationDate,
|
pp[DB_rev_date]))
|
||||||
(unsigned char *)pp[DB_rev_date],
|
goto err;
|
||||||
strlen(pp[DB_rev_date]));
|
|
||||||
/* strcpy(r->revocationDate,pp[DB_rev_date]);*/
|
/* strcpy(r->revocationDate,pp[DB_rev_date]);*/
|
||||||
|
|
||||||
(void)BIO_reset(hex);
|
(void)BIO_reset(hex);
|
||||||
|
@ -180,6 +180,7 @@ int ASN1_GENERALIZEDTIME_set_string(ASN1_GENERALIZEDTIME *s, char *str)
|
|||||||
{
|
{
|
||||||
ASN1_STRING_set((ASN1_STRING *)s,
|
ASN1_STRING_set((ASN1_STRING *)s,
|
||||||
(unsigned char *)str,t.length);
|
(unsigned char *)str,t.length);
|
||||||
|
s->type=V_ASN1_GENERALIZEDTIME;
|
||||||
}
|
}
|
||||||
return(1);
|
return(1);
|
||||||
}
|
}
|
||||||
|
@ -179,6 +179,7 @@ int ASN1_UTCTIME_set_string(ASN1_UTCTIME *s, char *str)
|
|||||||
{
|
{
|
||||||
ASN1_STRING_set((ASN1_STRING *)s,
|
ASN1_STRING_set((ASN1_STRING *)s,
|
||||||
(unsigned char *)str,t.length);
|
(unsigned char *)str,t.length);
|
||||||
|
s->type = V_ASN1_UTCTIME;
|
||||||
}
|
}
|
||||||
return(1);
|
return(1);
|
||||||
}
|
}
|
||||||
|
@ -112,7 +112,7 @@ int X509_CRL_print(BIO *out, X509_CRL *x)
|
|||||||
|
|
||||||
rev = X509_CRL_get_REVOKED(x);
|
rev = X509_CRL_get_REVOKED(x);
|
||||||
|
|
||||||
if(sk_X509_REVOKED_num(rev))
|
if(sk_X509_REVOKED_num(rev) > 0)
|
||||||
BIO_printf(out, "Revoked Certificates:\n");
|
BIO_printf(out, "Revoked Certificates:\n");
|
||||||
else BIO_printf(out, "No Revoked Certificates.\n");
|
else BIO_printf(out, "No Revoked Certificates.\n");
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user