diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-09 10:46:48 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:46:00 +0100 |
| commit | be8858e9b650829d90b286a20959f6ecaf7ac9c6 (patch) | |
| tree | 16ad8328b11e9cff0983cc196bbe944403b5284b /src/libstrongswan/credentials/credential_manager.c | |
| parent | 01d3038137e7ed789fb792a599a4c450ca269409 (diff) | |
| download | strongswan-be8858e9b650829d90b286a20959f6ecaf7ac9c6.tar.bz2 strongswan-be8858e9b650829d90b286a20959f6ecaf7ac9c6.tar.xz | |
Moved X509 pathlen constraint checking to constraints plugin
Diffstat (limited to 'src/libstrongswan/credentials/credential_manager.c')
| -rw-r--r-- | src/libstrongswan/credentials/credential_manager.c | 17 |
1 files changed, 0 insertions, 17 deletions
diff --git a/src/libstrongswan/credentials/credential_manager.c b/src/libstrongswan/credentials/credential_manager.c index f437bbf98..cc429ce68 100644 --- a/src/libstrongswan/credentials/credential_manager.c +++ b/src/libstrongswan/credentials/credential_manager.c @@ -471,23 +471,6 @@ static bool check_certificate(private_credential_manager_t *this, ¬_before, FALSE, ¬_after, FALSE); return FALSE; } - if (issuer->get_type(issuer) == CERT_X509 && - subject->get_type(subject) == CERT_X509) - { - int pathlen_constraint; - x509_t *x509; - - /* check path length constraint */ - x509 = (x509_t*)issuer; - pathlen_constraint = x509->get_pathLenConstraint(x509); - if (pathlen_constraint != X509_NO_PATH_LEN_CONSTRAINT && - pathlen > pathlen_constraint) - { - DBG1(DBG_CFG, "path length of %d violates constraint of %d", - pathlen, pathlen_constraint); - return FALSE; - } - } enumerator = this->validators->create_enumerator(this->validators); while (enumerator->enumerate(enumerator, &validator)) |