Recognize critical IssuingDistributionPoint CRL extension

diff --git a/src/libstrongswan/asn1/oid.txt b/src/libstrongswan/asn1/oid.txt
index 6030aa111b56152a6f7eff114b95709c2f5a5af7..740dc5073e40da1d13c9c140872271e1dc7cf2df 100644 (file)
--- a/src/libstrongswan/asn1/oid.txt
+++ b/src/libstrongswan/asn1/oid.txt
@@ -48,7 +48,7 @@
     0x17                     "holdInstructionCode"
     0x18                     "invalidityDate"
     0x1B                     "deltaCrlIndicator"               OID_DELTA_CRL_INDICATOR
-    0x1C                     "issuingDistributionPoint"
+    0x1C                     "issuingDistributionPoint"        OID_ISSUING_DIST_POINT
     0x1D                     "certificateIssuer"
     0x1E                     "nameConstraints"                 OID_NAME_CONSTRAINTS
     0x1F                     "crlDistributionPoints"   OID_CRL_DISTRIBUTION_POINTS

diff --git a/src/libstrongswan/plugins/openssl/openssl_crl.c b/src/libstrongswan/plugins/openssl/openssl_crl.c
index d4f36f58b5eb8c7a6633a4ae13ec2229d5c48b24..18aa5ceca3098257bf3944a463b4250ff4a1d6e5 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_crl.c
+++ b/src/libstrongswan/plugins/openssl/openssl_crl.c
@@ -464,6 +464,10 @@ static bool parse_extensions(private_openssl_crl_t *this)
                                case NID_crl_number:
                                        ok = parse_crlNumber_ext(this, ext);
                                        break;
+                               case NID_issuing_distribution_point:
+                                       /* TODO support of IssuingDistributionPoints */
+                                       ok = TRUE;
+                                       break;
                                default:
                                        ok = X509_EXTENSION_get_critical(ext) == 0 ||
                                                 !lib->settings->get_bool(lib->settings,

diff --git a/src/libstrongswan/plugins/x509/x509_crl.c b/src/libstrongswan/plugins/x509/x509_crl.c
index 5350d4a511a1d0386e067737881adb55e09e8a40..efb70c94cddaf19c1f24cafdf0230b83be182fc4 100644 (file)
--- a/src/libstrongswan/plugins/x509/x509_crl.c
+++ b/src/libstrongswan/plugins/x509/x509_crl.c
@@ -320,6 +320,9 @@ static bool parse(private_x509_crl_t *this)
                                                }
                                                this->baseCrlNumber = object;
                                                break;
+                                       case OID_ISSUING_DIST_POINT:
+                                               /* TODO support of IssuingDistributionPoints */
+                                               break;
                                        default:
                                                if (critical && lib->settings->get_bool(lib->settings,
                                                        "libstrongswan.x509.enforce_critical", TRUE))