diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2012-08-15 15:15:05 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2012-08-15 15:15:05 +0000 |
commit | 2ea803546046e61783da398306b4a19070c51448 (patch) | |
tree | 1cbb1773f735b2a989bb79be74f04c8e6c044a9e /ssl/ssl_cert.c | |
parent | 5833e4f5d63b2ca9637c1427a1efc170c479b925 (diff) |
Add three Suite B modes to TLS code, supporting RFC6460.
Diffstat (limited to 'ssl/ssl_cert.c')
-rw-r--r-- | ssl/ssl_cert.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c index 470ac17098..6dfde2f8da 100644 --- a/ssl/ssl_cert.c +++ b/ssl/ssl_cert.c @@ -692,6 +692,8 @@ int ssl_verify_cert_chain(SSL *s,STACK_OF(X509) *sk) SSLerr(SSL_F_SSL_VERIFY_CERT_CHAIN,ERR_R_X509_LIB); return(0); } + /* Set suite B flags if needed */ + X509_STORE_CTX_set_flags(&ctx, tls1_suiteb(s)); #if 0 if (SSL_get_verify_depth(s) >= 0) X509_STORE_CTX_set_depth(&ctx, SSL_get_verify_depth(s)); @@ -1151,6 +1153,8 @@ int ssl_build_cert_chain(CERT *c, X509_STORE *chain_store, int flags) SSLerr(SSL_F_SSL_BUILD_CERT_CHAIN, ERR_R_X509_LIB); return 0; } + /* Set suite B flags if needed */ + X509_STORE_CTX_set_flags(&xs_ctx, c->cert_flags & SSL_CERT_FLAG_SUITEB_128_LOS); i = X509_verify_cert(&xs_ctx); if (i > 0) |