mirrors/cosmopolitan
1
0
Fork 0
mirror of https://github.com/jart/cosmopolitan.git synced 2025-03-03 15:38:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fix chained certificate loading

Browse source
This commit is contained in:
Justine Tunney 2021-07-08 17:28:44 -07:00
parent feb0f9fb3a
commit 45d72920ba
1 changed files with 9 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
tool/net/redbean.c
View file

@ -651,18 +651,19 @@ static bool ChainCertificate(mbedtls_x509_crt *cert, mbedtls_x509_crt *parent) {
} }
} }
static void InternCertificate(mbedtls_x509_crt *cert, static void InternCertificate(mbedtls_x509_crt *cert, mbedtls_x509_crt *prev) {
mbedtls_x509_crt *parent) {
int r; int r;
size_t i; size_t i;
if (cert->next) InternCertificate(cert->next, cert); if (cert->next) InternCertificate(cert->next, cert);
if (parent) { if (prev) {
if (mbedtls_x509_crt_check_parent(cert, parent, 1)) { if (mbedtls_x509_crt_check_parent(prev, cert, 1)) {
parent->next = 0; /* unchain ca root bundles */ DEBUGF("unbundling %`'s from %`'s", gc(FormatX509Name(&prev->subject)),
} else if ((r = mbedtls_x509_crt_check_signature(cert, parent, 0))) { gc(FormatX509Name(&cert->subject)));
prev->next = 0;
} else if ((r = mbedtls_x509_crt_check_signature(prev, cert, 0))) {
WARNF("invalid signature for %`'s -> %`'s (-0x%04x)", WARNF("invalid signature for %`'s -> %`'s (-0x%04x)",
gc(FormatX509Name(&cert->subject)), gc(FormatX509Name(&prev->subject)),
gc(FormatX509Name(&parent->subject)), -r); gc(FormatX509Name(&cert->subject)), -r);
} }
} }
if (mbedtls_x509_time_is_past(&cert->valid_to)) { if (mbedtls_x509_time_is_past(&cert->valid_to)) {