]> xenbits.xensource.com Git - libvirt.git/commit
Add sanity checking of basic constraints, key purpose & key usage
authorDaniel P. Berrange <berrange@redhat.com>
Fri, 15 Jul 2011 11:55:23 +0000 (12:55 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Tue, 19 Jul 2011 15:25:01 +0000 (16:25 +0100)
commit79591d4fbf666a5b1a5b93c9f30ddc81e77d593a
tree9a65b2f67429169dde755881e4091692eb2445c8
parent543c266d2df41a551ed91238d2c4ce5e7a495465
Add sanity checking of basic constraints, key purpose & key usage

Gnutls requires that certificates have basic constraints present
to be used as a CA certificate. OpenSSL doesn't add this data
by default, so add a sanity check to catch this situation. Also
validate that the key usage and key purpose constraints contain
correct data

* src/rpc/virnettlscontext.c: Add sanity checking of certificate
  constraints
src/rpc/virnettlscontext.c