mirrors/cosmopolitan
1
0
Fork 0
mirror of https://github.com/jart/cosmopolitan.git synced 2025-03-03 15:38:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fix chained certificate loading

Browse source
This commit is contained in:
Justine Tunney 2021-07-08 17:28:44 -07:00
parent feb0f9fb3a
commit 45d72920ba
1 changed files with 9 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
tool/net/redbean.c
View file

@ -651,18 +651,19 @@ static bool ChainCertificate(mbedtls_x509_crt *cert, mbedtls_x509_crt *parent) {
}
}
static void InternCertificate(mbedtls_x509_crt *cert,
mbedtls_x509_crt *parent) {
static void InternCertificate(mbedtls_x509_crt *cert, mbedtls_x509_crt *prev) {
int r;
size_t i;
if (cert->next) InternCertificate(cert->next, cert);
if (parent) {
if (mbedtls_x509_crt_check_parent(cert, parent, 1)) {
parent->next = 0; /* unchain ca root bundles */
} else if ((r = mbedtls_x509_crt_check_signature(cert, parent, 0))) {
if (prev) {
if (mbedtls_x509_crt_check_parent(prev, cert, 1)) {
DEBUGF("unbundling %`'s from %`'s", gc(FormatX509Name(&prev->subject)),
gc(FormatX509Name(&cert->subject)));
prev->next = 0;
} else if ((r = mbedtls_x509_crt_check_signature(prev, cert, 0))) {
WARNF("invalid signature for %`'s -> %`'s (-0x%04x)",
gc(FormatX509Name(&cert->subject)),
gc(FormatX509Name(&parent->subject)), -r);
gc(FormatX509Name(&prev->subject)),
gc(FormatX509Name(&cert->subject)), -r);
}
}
if (mbedtls_x509_time_is_past(&cert->valid_to)) {