lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-30 22:43:08 +03:00
Code Activity

- Multi-domain certificates support wildcards as well

Browse Source
This commit is contained in:
Paul Bakker
2012-02-11 17:38:38 +00:00
parent 1504af585c
commit 57b12982b3
8 changed files with 161 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
library/x509parse.c
View File

@ -2971,12 +2971,12 @@ static int x509parse_verifycrl(x509_cert *crt, x509_cert *ca,
return flags;
}
int x509_wildcard_verify( const char *cn, x509_name *name )
int x509_wildcard_verify( const char *cn, x509_buf *name )
{
size_t i;
size_t cn_idx = 0;
if( name->val.len < 3 || name->val.p[0] != '*' || name->val.p[1] != '.' )
if( name->len < 3 || name->p[0] != '*' || name->p[1] != '.' )
return( 0 );
for( i = 0; i < strlen( cn ); ++i )
@ -2991,8 +2991,8 @@ int x509_wildcard_verify( const char *cn, x509_name *name )
if( cn_idx == 0 )
return( 0 );
if( memcmp( name->val.p + 1, cn + cn_idx, name->val.len - 1 ) == 0 &&
strlen( cn ) - cn_idx == name->val.len - 1 )
if( memcmp( name->p + 1, cn + cn_idx, name->len - 1 ) == 0 &&
strlen( cn ) - cn_idx == name->len - 1 )
{
return( 1 );
}
@ -3037,7 +3037,7 @@ int x509parse_verify( x509_cert *crt,
break;
if( memcmp( name->val.p, "*.", 2 ) == 0 &&
x509_wildcard_verify( cn, name ) )
x509_wildcard_verify( cn, &name->val ) )
break;
}
@ -3056,6 +3056,10 @@ int x509parse_verify( x509_cert *crt,
cur->buf.len == cn_len )
break;
if( memcmp( cur->buf.p, "*.", 2 ) == 0 &&
x509_wildcard_verify( cn, &cur->buf ) )
break;
cur = cur->next;
}
}