abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-08-09 15:33:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update X.509 Path Validation

Browse Source 
To be continue ...
This commit is contained in:
Zhi Guan
2023-01-10 00:08:13 +08:00
parent cdd57c6385
commit 4dbf32fd6a
9 changed files with 285 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/tls12.c
View File

@@ -345,6 +345,7 @@ int tls12_do_connect(TLS_CONNECT *conn)
// verify ServerCertificate
if (x509_certs_verify(conn->server_certs, conn->server_certs_len,
1, // server
conn->ca_certs, conn->ca_certs_len, depth, &verify_result) != 1) {
error_print();
tls_send_alert(conn, alert);
@@ -883,6 +884,7 @@ int tls12_do_accept(TLS_CONNECT *conn)
goto end;
}
if (x509_certs_verify(conn->client_certs, conn->client_certs_len,
0, // client
conn->ca_certs, conn->ca_certs_len, verify_depth, &verify_result) != 1) {
error_print();
tls_send_alert(conn, TLS_alert_bad_certificate);