diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2008-09-01 15:15:16 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2008-09-01 15:15:16 +0000 |
| commit | d43c4497ce1611373c3a3e5b433dfde4907d1a69 (patch) | |
| tree | 412a0fe67c6f39893614919e58dbcae0a7a422ae /crypto/x509v3/v3_purp.c | |
| parent | 4b96839f069a2c9fef3d1feffca2880361181544 (diff) | |
Initial support for delta CRLs. If "use deltas" flag is set attempt to find
a delta CRL in addition to a full CRL. Check and search delta in addition to
the base.
Diffstat (limited to 'crypto/x509v3/v3_purp.c')
| -rw-r--r-- | crypto/x509v3/v3_purp.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c index 2234bf147a..1ca370dc0b 100644 --- a/crypto/x509v3/v3_purp.c +++ b/crypto/x509v3/v3_purp.c @@ -465,8 +465,7 @@ static void x509v3_cache_extensions(X509 *x) if (!x->nc && (i != -1)) x->ex_flags |= EXFLAG_INVALID; setup_crldp(x); - - + #ifndef OPENSSL_NO_RFC3779 x->rfc3779_addr =X509_get_ext_d2i(x, NID_sbgp_ipAddrBlock, NULL, NULL); x->rfc3779_asid =X509_get_ext_d2i(x, NID_sbgp_autonomousSysNum, @@ -477,6 +476,9 @@ static void x509v3_cache_extensions(X509 *x) ex = X509_get_ext(x, i); if (!X509_EXTENSION_get_critical(ex)) continue; + if (OBJ_obj2nid(X509_EXTENSION_get_object(ex)) + == NID_freshest_crl) + x->ex_flags |= EXFLAG_FRESHEST; if (!X509_supported_extension(ex)) { x->ex_flags |= EXFLAG_CRITICAL; |