diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-15 14:31:04 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:46:02 +0100 |
| commit | 6c3ac04478a109ec443a1328c468d60444dcb624 (patch) | |
| tree | b86a0c0b625133513ac2727499964205e671694f /src/pki/commands/print.c | |
| parent | 20bd78106e8ea95c8030e935b0276366b5ecd1ab (diff) | |
| download | strongswan-6c3ac04478a109ec443a1328c468d60444dcb624.tar.bz2 strongswan-6c3ac04478a109ec443a1328c468d60444dcb624.tar.xz | |
Added certificatePolicy options to pki tool
Diffstat (limited to 'src/pki/commands/print.c')
| -rw-r--r-- | src/pki/commands/print.c | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/src/pki/commands/print.c b/src/pki/commands/print.c index 0eb51ccda..af0c92cd4 100644 --- a/src/pki/commands/print.c +++ b/src/pki/commands/print.c @@ -15,6 +15,7 @@ #include "pki.h" +#include <asn1/asn1.h> #include <credentials/certificates/certificate.h> #include <credentials/certificates/x509.h> #include <credentials/certificates/crl.h> @@ -74,6 +75,7 @@ static void print_x509(x509_t *x509) char *uri; int len; x509_flag_t flags; + x509_cert_policy_t *policy; chunk = x509->get_serial(x509); printf("serial: %#B\n", &chunk); @@ -203,6 +205,39 @@ static void print_x509(x509_t *x509) } enumerator->destroy(enumerator); + first = TRUE; + enumerator = x509->create_cert_policy_enumerator(x509); + while (enumerator->enumerate(enumerator, &policy)) + { + char *oid; + + if (first) + { + printf("CertificatePolicies:\n"); + first = FALSE; + } + oid = asn1_oid_to_string(policy->oid); + if (oid) + { + printf(" %s\n", oid); + free(oid); + } + else + { + printf(" %#B\n", &policy->oid); + } + if (policy->cps_uri) + { + printf(" CPS: %s\n", policy->cps_uri); + } + if (policy->unotice_text) + { + printf(" Notice: %s\n", policy->unotice_text); + + } + } + enumerator->destroy(enumerator); + chunk = x509->get_authKeyIdentifier(x509); if (chunk.ptr) { |