Update X509 cert chain verify

This commit is contained in:
Zhi Guan
2026-06-18 19:25:34 +08:00
parent 055d3fe812
commit d7c6db0a21
4 changed files with 6 additions and 2 deletions

View File

@@ -820,7 +820,7 @@ endif()
# #
set(CPACK_PACKAGE_NAME "GmSSL") set(CPACK_PACKAGE_NAME "GmSSL")
set(CPACK_PACKAGE_VENDOR "GmSSL develop team") set(CPACK_PACKAGE_VENDOR "GmSSL develop team")
set(CPACK_PACKAGE_VERSION "3.2.0-dev.1088") set(CPACK_PACKAGE_VERSION "3.2.0-dev.1089")
set(CPACK_PACKAGE_DESCRIPTION_FILE ${PROJECT_SOURCE_DIR}/README.md) set(CPACK_PACKAGE_DESCRIPTION_FILE ${PROJECT_SOURCE_DIR}/README.md)
set(CPACK_NSIS_MODIFY_PATH ON) set(CPACK_NSIS_MODIFY_PATH ON)
include(CPack) include(CPack)

View File

@@ -18,7 +18,7 @@ extern "C" {
#define GMSSL_VERSION_NUM 30200 #define GMSSL_VERSION_NUM 30200
#define GMSSL_VERSION_STR "GmSSL 3.2.0-dev.1088" #define GMSSL_VERSION_STR "GmSSL 3.2.0-dev.1089"
int gmssl_version_num(void); int gmssl_version_num(void);
const char *gmssl_version_str(void); const char *gmssl_version_str(void);

View File

@@ -324,6 +324,7 @@ typedef enum {
} X509_CERT_TYPE; } X509_CERT_TYPE;
int x509_cert_check(const uint8_t *cert, size_t certlen, int cert_type, int *path_len_constraint); int x509_cert_check(const uint8_t *cert, size_t certlen, int cert_type, int *path_len_constraint);
int x509_cert_check_subject(const uint8_t *cert, size_t certlen, int is_cacert);
/* /*
IssuerAndSerialNumber ::= SEQUENCE { IssuerAndSerialNumber ::= SEQUENCE {
@@ -363,6 +364,8 @@ typedef enum {
} X509_CERT_CHAIN_TYPE; } X509_CERT_CHAIN_TYPE;
#define X509_MAX_VERIFY_DEPTH 6 #define X509_MAX_VERIFY_DEPTH 6
//int x509_cert_chain_verify(const uint8_t *certs, size_t certslen,
// const uint8_t *cacerts, size_t cacertslen, int depth, int *verify_result);
int x509_certs_verify(const uint8_t *certs, size_t certslen, int certs_type, int x509_certs_verify(const uint8_t *certs, size_t certslen, int certs_type,
const uint8_t *rootcerts, size_t rootcertslen, int depth, int *verify_result); const uint8_t *rootcerts, size_t rootcertslen, int depth, int *verify_result);
int x509_certs_verify_tlcp(const uint8_t *certs, size_t certslen, int certs_type, int x509_certs_verify_tlcp(const uint8_t *certs, size_t certslen, int certs_type,

View File

@@ -182,6 +182,7 @@ static int sm4_cl_set_key(SM4_CL_CTX *ctx, const uint8_t key[16], int enc)
cl_error_print(err); cl_error_print(err);
// FIXME: sizeof(log) 错误?
if ((err = clGetProgramBuildInfo(ctx->program, device, CL_PROGRAM_BUILD_LOG, sizeof(log), NULL, &loglen)) != CL_SUCCESS) { if ((err = clGetProgramBuildInfo(ctx->program, device, CL_PROGRAM_BUILD_LOG, sizeof(log), NULL, &loglen)) != CL_SUCCESS) {
cl_error_print(err); cl_error_print(err);
goto end; goto end;