aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/plugins/openssl/openssl_crl.c
diff options
context:
space:
mode:
authorAndreas Steffen <andreas.steffen@strongswan.org>2011-02-05 09:01:18 +0100
committerAndreas Steffen <andreas.steffen@strongswan.org>2011-02-05 09:01:18 +0100
commitc4fd3b2f42a489f8e6328bd7e9400cbca35f0d09 (patch)
treeb3b187ce633dfe2352487b65f89f762c9f78b572 /src/libstrongswan/plugins/openssl/openssl_crl.c
parent8d13c12eac39e7750dbdc24f0a5d83436bdd0407 (diff)
downloadstrongswan-c4fd3b2f42a489f8e6328bd7e9400cbca35f0d09.tar.bz2
strongswan-c4fd3b2f42a489f8e6328bd7e9400cbca35f0d09.tar.xz
introduced libstrongswan.x509.enforce_critical parameter
Diffstat (limited to 'src/libstrongswan/plugins/openssl/openssl_crl.c')
-rw-r--r--src/libstrongswan/plugins/openssl/openssl_crl.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/libstrongswan/plugins/openssl/openssl_crl.c b/src/libstrongswan/plugins/openssl/openssl_crl.c
index 7786b7fbb..58401faa5 100644
--- a/src/libstrongswan/plugins/openssl/openssl_crl.c
+++ b/src/libstrongswan/plugins/openssl/openssl_crl.c
@@ -460,7 +460,9 @@ static bool parse_extensions(private_openssl_crl_t *this)
ok = parse_crlNumber_ext(this, ext);
break;
default:
- ok = X509_EXTENSION_get_critical(ext) != 0;
+ ok = X509_EXTENSION_get_critical(ext) == 0 ||
+ !lib->settings->get_bool(lib->settings,
+ "libstrongswan.x509.enforce_critical", TRUE);
if (!ok)
{
DBG1(DBG_LIB, "found unsupported critical X.509 "