diff options
| author | Rob Austein <sra@hactrn.net> | 2012-02-14 23:53:30 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2012-02-14 23:53:30 +0000 |
| commit | 11553fcc11d3988f0ee13232510b5e179e539208 (patch) | |
| tree | 8bf16078e3e3bf5c7219bdb71a731f16151f0327 | |
| parent | 87043f4acdda0d3914aaafbd479f6426e188d383 (diff) | |
Downgrade "AIA doesn't match issuer" to a warning. Closes #188.
svn path=/trunk/; revision=4334
| -rw-r--r-- | rcynic/rcynic.c | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/rcynic/rcynic.c b/rcynic/rcynic.c index da012b5d..3400125b 100644 --- a/rcynic/rcynic.c +++ b/rcynic/rcynic.c @@ -204,7 +204,6 @@ static const struct { #define MIB_COUNTERS \ MIB_COUNTERS_FROM_OPENSSL \ - QB(aia_doesnt_match_issuer, "AIA doesn't match issuer") \ QB(aia_extension_missing, "AIA extension missing") \ QB(aia_extension_forbidden, "AIA extension forbidden") \ QB(aia_uri_missing, "AIA URI missing") \ @@ -271,6 +270,7 @@ static const struct { QB(unreadable_trust_anchor, "Unreadable trust anchor") \ QB(unreadable_trust_anchor_locator, "Unreadable trust anchor locator") \ QB(wrong_object_version, "Wrong object version") \ + QW(aia_doesnt_match_issuer, "AIA doesn't match issuer") \ QW(crldp_names_newer_crl, "CRLDP names newer CRL") \ QW(digest_mismatch, "Digest mismatch") \ QW(ee_certificate_with_1024_bit_key, "EE certificate with 1024 bit key") \ @@ -3368,10 +3368,8 @@ static int check_x509(rcynic_ctx_t *rc, goto done; } - if (!w->certinfo.ta && strcmp(w->certinfo.uri.s, certinfo->aia.s)) { + if (!w->certinfo.ta && strcmp(w->certinfo.uri.s, certinfo->aia.s)) log_validation_status(rc, uri, aia_doesnt_match_issuer, generation); - goto done; - } if (certinfo->ca && !certinfo->sia.s[0]) { log_validation_status(rc, uri, sia_cadirectory_uri_missing, generation); |