]> git.ipfire.org Git - thirdparty/squid.git/commit
Add checks to assure that a cached certificate is valid for current request
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 5 Apr 2012 16:38:31 +0000 (19:38 +0300)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 5 Apr 2012 16:38:31 +0000 (19:38 +0300)
commit0efa4d01c223922cf637cd4f81796bf6470fa97d
tree30bf65dabfc31447263d85875bf4ab5bc854dd52
parentd2c3030de9e34b3c0e7efa8f0cf3098d17fe0bfe
Add checks to assure that a cached certificate is valid for current request

Add checks in Ssl::certificateMatchesProperties to assure:
 - The CN name of the cached certificate matches the requested CN
 - "Not After" and "Not Before" fields of the cached certificate are valid

Ssl::CommonHostName and getOrganization  functions moved to gadgets.cc to allow
use by ssl_crtd daemon
src/ssl/gadgets.cc
src/ssl/gadgets.h
src/ssl/support.cc
src/ssl/support.h