diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-22 15:10:03 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:46:05 +0100 |
| commit | b3d359e58facb9744a1fc95507fb97e970b30891 (patch) | |
| tree | b03335fce01ee158aa5f993094ec076086f18c81 /src/libstrongswan/plugins/constraints/constraints_validator.c | |
| parent | b1703d6cb3fb1df9df7f840d422de84ab3a0c3c7 (diff) | |
| download | strongswan-b3d359e58facb9744a1fc95507fb97e970b30891.tar.bz2 strongswan-b3d359e58facb9744a1fc95507fb97e970b30891.tar.xz | |
Use a generic getter for all numerical X.509 constraints
Diffstat (limited to 'src/libstrongswan/plugins/constraints/constraints_validator.c')
| -rw-r--r-- | src/libstrongswan/plugins/constraints/constraints_validator.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/libstrongswan/plugins/constraints/constraints_validator.c b/src/libstrongswan/plugins/constraints/constraints_validator.c index 3d5211ef8..9df775cd9 100644 --- a/src/libstrongswan/plugins/constraints/constraints_validator.c +++ b/src/libstrongswan/plugins/constraints/constraints_validator.c @@ -40,7 +40,7 @@ static bool check_pathlen(x509_t *issuer, int pathlen) { int pathlen_constraint; - pathlen_constraint = issuer->get_pathLenConstraint(issuer); + pathlen_constraint = issuer->get_constraint(issuer, X509_PATH_LEN); if (pathlen_constraint != X509_NO_CONSTRAINT && pathlen > pathlen_constraint) { @@ -439,7 +439,7 @@ static bool check_policy_constraints(x509_t *issuer, int pathlen, enumerator = chain->create_enumerator(chain); while (enumerator->enumerate(enumerator, &x509)) { - expl = x509->get_policyConstraint(x509, FALSE); + expl = x509->get_constraint(x509, X509_REQUIRE_EXPLICIT_POLICY); if (expl != X509_NO_CONSTRAINT) { if (!has_policy_chain(chain, (x509_t*)subject, len - expl)) @@ -458,7 +458,7 @@ static bool check_policy_constraints(x509_t *issuer, int pathlen, enumerator = chain->create_enumerator(chain); while (enumerator->enumerate(enumerator, &x509)) { - expl = x509->get_policyConstraint(x509, TRUE); + expl = x509->get_constraint(x509, X509_INHIBIT_POLICY_MAPPING); if (expl != X509_NO_CONSTRAINT) { if (!has_policy_mapping(chain, len - expl)) |