]> git.ipfire.org Git - thirdparty/strongswan.git/commit
revocation: Also store validation results for intermediate CA certificates
authorTobias Brunner <tobias@strongswan.org>
Thu, 3 May 2018 09:07:59 +0000 (11:07 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 22 May 2018 07:50:47 +0000 (09:50 +0200)
commitb00d3adbd1645e44517deb17930b346b83802f24
tree9040f2e791a30a52939beaab8fe3e106700b44bc
parent13f76a241cef93cda07823e0e92760b3df45e5d4
revocation: Also store validation results for intermediate CA certificates

If the certificate is revoked, we immediately returned and the chain was
invalid, however, if we couldn't fetch the CRL that result was not stored
for intermediate CAs and we weren't able to enforce a strict CRL policy
later.
src/libstrongswan/plugins/revocation/revocation_validator.c