]> git.ipfire.org Git - thirdparty/strongswan.git/commit
certificates: Retrieve serial numbers in canonical form
authorAndreas Steffen <andreas.steffen@strongswan.org>
Sun, 20 Nov 2022 10:27:34 +0000 (11:27 +0100)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Mon, 5 Dec 2022 19:18:24 +0000 (20:18 +0100)
commit18082ce2b061da2a12125e535484495d3312e598
tree0aa9f6bb68e9f93df6b5b938284bfd01af4b9c6e
parentcb5ae75ac1fa3acd2c5201b091c0a010f45f6652
certificates: Retrieve serial numbers in canonical form

The x509 plugin retrieves serial numbers with two's complement
encoding whereas the openssl plugin partially returns them without
leading zeroes.

Serial numbers in X.509 certificates, X.509 CRL, X.509 attribute
certificates, OCSP Requests and OCSP responses are now returned in
canonical form without prepended zero octets.
src/libstrongswan/credentials/certificates/certificate_printer.c
src/libstrongswan/credentials/certificates/crl.h
src/libstrongswan/plugins/openssl/openssl_crl.c
src/libstrongswan/plugins/revocation/revocation_validator.c
src/libstrongswan/plugins/x509/x509_ac.c
src/libstrongswan/plugins/x509/x509_cert.c
src/libstrongswan/plugins/x509/x509_crl.c
src/libstrongswan/plugins/x509/x509_ocsp_request.c
src/libstrongswan/plugins/x509/x509_ocsp_response.c
src/pki/commands/signcrl.c