yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-03-26 10:05:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Let verify_top() handle only the parent

Browse source 
It felt wrong for it to call the vrfy callback on two certs.
This commit is contained in:
Manuel Pégourié-Gonnard 2017-07-03 23:57:11 +02:00
parent 6e786747fb
commit 63642776b1
1 changed files with 10 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
library/x509_crt.c
View file

@ -2017,6 +2017,7 @@ static int x509_crt_verify_top(
(void) self_cnt; (void) self_cnt;
((void) ca_crl); ((void) ca_crl);
(void) profile; (void) profile;
(void) child;
/* Check time-validity of the parent */ /* Check time-validity of the parent */
if( mbedtls_x509_time_is_past( &trust_ca->valid_to ) ) if( mbedtls_x509_time_is_past( &trust_ca->valid_to ) )
@ -2034,13 +2035,6 @@ static int x509_crt_verify_top(
} }
} }
/* Call callback on child */
if( NULL != f_vrfy )
{
if( ( ret = f_vrfy( p_vrfy, child, path_cnt, flags ) ) != 0 )
return( ret );
}
*flags |= ca_flags; *flags |= ca_flags;
return( 0 ); return( 0 );
@ -2132,14 +2126,16 @@ static int x509_crt_verify_child(
if( parent_is_trusted ) if( parent_is_trusted )
{ {
return( x509_crt_verify_top( child, parent, ca_crl, profile, ret = x509_crt_verify_top( child, parent, ca_crl, profile,
path_cnt, self_cnt, flags, f_vrfy, p_vrfy ) ); path_cnt, self_cnt, &parent_flags, f_vrfy, p_vrfy );
}
else
{
/* verify the rest of the chain starting from parent */
ret = x509_crt_verify_child( parent, trust_ca, ca_crl,
profile, path_cnt + 1, self_cnt, &parent_flags,
f_vrfy, p_vrfy );
} }
/* verify the rest of the chain starting from parent */
ret = x509_crt_verify_child( parent, trust_ca, ca_crl,
profile, path_cnt + 1, self_cnt, &parent_flags,
f_vrfy, p_vrfy );
if( ret != 0 ) if( ret != 0 )
return( ret ); return( ret );