From 6bc79007a136e5bbb68f7d8e9616f99bdea30278 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Tue, 1 Aug 2006 23:48:33 +0000 Subject: Add hooks for RFC 3779 path validation. svn path=/openssl/trunk/crypto/x509/x509_vfy.c; revision=134 --- openssl/trunk/crypto/x509/x509_vfy.c | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'openssl/trunk/crypto/x509/x509_vfy.c') diff --git a/openssl/trunk/crypto/x509/x509_vfy.c b/openssl/trunk/crypto/x509/x509_vfy.c index 79dae3d3..47b15455 100644 --- a/openssl/trunk/crypto/x509/x509_vfy.c +++ b/openssl/trunk/crypto/x509/x509_vfy.c @@ -289,6 +289,15 @@ int X509_verify_cert(X509_STORE_CTX *ctx) if (!ok) goto end; + /* Check RFC 3779 path validation */ + ok = v3_asid_validate_path(ctx); + + if (!ok) goto end; + + ok = v3_addr_validate_path(ctx); + + if (!ok) goto end; + /* The chain extensions are OK: check trust */ if (param->trust > 0) ok = check_trust(ctx); -- cgit v1.2.3