diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-03-02 23:30:33 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-03-02 23:37:05 +0100 |
| commit | f2112350d915689c383f27351a95fff8de8a6660 (patch) | |
| tree | ff3a127da9bdc1b79c8b8976032feeff1a1cacb1 | |
| parent | 1972eaa216489512dd73db52f9fca473ef859e33 (diff) | |
| download | gnutls_3_2_12.tar.gz | |
check the blacklist for certificates provided in gnutls_x509_trust_list_verify_named_crt().gnutls_3_2_12
Conflicts:
lib/x509/verify-high.c
| -rw-r--r-- | lib/x509/verify-high.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c index 5297f0c05c..d6b012b6f9 100644 --- a/lib/x509/verify-high.c +++ b/lib/x509/verify-high.c @@ -757,6 +757,14 @@ gnutls_x509_trust_list_verify_named_crt(gnutls_x509_trust_list_t list, cert->raw_issuer_dn.size); hash %= list->size; + ret = check_if_in_blacklist(&cert, 1, + list->blacklisted, list->blacklisted_size); + if (ret != 0) { + *verify |= GNUTLS_CERT_REVOKED; + *verify |= GNUTLS_CERT_INVALID; + return 0; + } + *verify = GNUTLS_CERT_INVALID | GNUTLS_CERT_SIGNER_NOT_FOUND; for (i = 0; i < list->node[hash].named_cert_size; i++) { |