abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-06-27 15:43:42 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update x509_certs_verify_tlcp

Browse Source
This commit is contained in:
Zhi Guan
2026-06-19 10:44:54 +08:00
parent 2a943e6d16
commit 2d98b5afae
5 changed files with 436 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
include/gmssl/version.h
View File

@@ -18,7 +18,7 @@ extern "C" {
#define GMSSL_VERSION_NUM 30200
#define GMSSL_VERSION_STR "GmSSL 3.2.0-dev.1099"
#define GMSSL_VERSION_STR "GmSSL 3.2.0-dev.1100"
int gmssl_version_num(void);
const char *gmssl_version_str(void);

6
include/gmssl/x509_cer.h
View File

@@ -336,6 +336,8 @@ int x509_cert_check_subject(const uint8_t *cert, size_t certlen, int is_cacert);
int x509_cert_check_name_constraints(const uint8_t *cert, size_t certlen,
const uint8_t *name_constraints, size_t name_constraints_len);
int x509_cert_is_self_issued(const uint8_t *cert, size_t certlen);
int x509_tlcp_cert_pair_entity_match(const uint8_t *sign_cert, size_t sign_certlen,
const uint8_t *kenc_cert, size_t kenc_certlen);
/*
IssuerAndSerialNumber ::= SEQUENCE {
@@ -385,6 +387,10 @@ int x509_certs_check_name_constraints(const uint8_t *cert_chain, size_t cert_cha
const uint8_t *rootcacert, size_t rootcacertlen);
int x509_certs_check_basic_constraints(const uint8_t *cert_chain, size_t cert_chain_len,
const uint8_t *rootcacert, size_t rootcacertlen);
int x509_certs_check_name_constraints_tlcp(const uint8_t *cert_chain, size_t cert_chain_len,
const uint8_t *rootcacert, size_t rootcacertlen);
int x509_certs_check_basic_constraints_tlcp(const uint8_t *cert_chain, size_t cert_chain_len,
const uint8_t *rootcacert, size_t rootcacertlen);
int x509_certs_get_subjects(const uint8_t *certs, size_t certslen, uint8_t *names, size_t *nameslen);
int x509_certs_print(FILE *fp, int fmt, int ind, const char *label, const uint8_t *d, size_t dlen);