x509: Replace the comma separated string AC group builder with a list based one

diff --git a/src/libstrongswan/credentials/builder.c b/src/libstrongswan/credentials/builder.c
index 4e52272a7c18e48b3fd8f85f7c4eb994ebc1d409..ddb64ef88a8d316f7c48891507295a6d726d6c5d 100644 (file)
--- a/src/libstrongswan/credentials/builder.c
+++ b/src/libstrongswan/credentials/builder.c
@@ -38,7 +38,7 @@ ENUM(builder_part_names, BUILD_FROM_FILE, BUILD_END,
        "BUILD_SERIAL",
        "BUILD_DIGEST_ALG",
        "BUILD_ENCRYPTION_ALG",
-       "BUILD_IETF_GROUP_ATTR",
+       "BUILD_AC_GROUP_STRINGS",
        "BUILD_CA_CERT",
        "BUILD_CERT",
        "BUILD_CRL_DISTRIBUTION_POINTS",
@@ -72,4 +72,3 @@ ENUM(builder_part_names, BUILD_FROM_FILE, BUILD_END,
        "BUILD_THRESHOLD",
        "BUILD_END",
 );
-

diff --git a/src/libstrongswan/credentials/builder.h b/src/libstrongswan/credentials/builder.h
index 103b823c0f82a30e80bb38b17c0b48d9bbd2b69f..627e0934d00302435272757d63ab1d0804c9e1e3 100644 (file)
--- a/src/libstrongswan/credentials/builder.h
+++ b/src/libstrongswan/credentials/builder.h
@@ -87,8 +87,8 @@ enum builder_part_t {
        BUILD_DIGEST_ALG,
        /** encryption algorithm to use, encryption_algorithm_t */
        BUILD_ENCRYPTION_ALG,
-       /** a comma-separated list of ietf group attributes, char* */
-       BUILD_IETF_GROUP_ATTR,
+       /** list of AC group memberships, linked_list_t* with char* */
+       BUILD_AC_GROUP_STRINGS,
        /** a ca certificate, certificate_t* */
        BUILD_CA_CERT,
        /** a certificate, certificate_t* */

diff --git a/src/libstrongswan/plugins/x509/x509_ac.c b/src/libstrongswan/plugins/x509/x509_ac.c
index 410b2e5ce6277fd72de7b5bd0e96503433ebfa6c..97e2a941ee3ca7539bff056ef9b7ffc1753d1e25 100644 (file)
--- a/src/libstrongswan/plugins/x509/x509_ac.c
+++ b/src/libstrongswan/plugins/x509/x509_ac.c
@@ -1065,15 +1065,15 @@ x509_ac_t *x509_ac_load(certificate_type_t type, va_list args)
 }
 
 /**
- * Parse a comma separated group list into AC group memberships
+ * Add groups from a list into AC group memberships
  */
-static void add_groups_from_string(private_x509_ac_t *this, char *str)
+static void add_groups_from_list(private_x509_ac_t *this, linked_list_t *list)
 {
        enumerator_t *enumerator;
        group_t *group;
        char *name;
 
-       enumerator = enumerator_create_token(str, ",", " ");
+       enumerator = list->create_enumerator(list);
        while (enumerator->enumerate(enumerator, &name))
        {
                INIT(group,
@@ -1106,8 +1106,8 @@ x509_ac_t *x509_ac_gen(certificate_type_t type, va_list args)
                        case BUILD_SERIAL:
                                ac->serialNumber = chunk_clone(va_arg(args, chunk_t));
                                continue;
-                       case BUILD_IETF_GROUP_ATTR:
-                               add_groups_from_string(ac, va_arg(args, char*));
+                       case BUILD_AC_GROUP_STRINGS:
+                               add_groups_from_list(ac, va_arg(args, linked_list_t*));
                                continue;
                        case BUILD_CERT:
                                ac->holderCert = va_arg(args, certificate_t*);

diff --git a/src/openac/openac.c b/src/openac/openac.c
index 8862e9ab03069bf272117819ab53fa7fa5c939d2..1424a7e7293e666dfa81633d37e06ec65f7bc279 100644 (file)
--- a/src/openac/openac.c
+++ b/src/openac/openac.c
@@ -495,6 +495,18 @@ int main(int argc, char **argv)
        if (userCert != NULL && signerCert != NULL && signerKey != NULL &&
                outfile != NULL)
        {
+               linked_list_t *group_list;
+               enumerator_t *enumerator;
+               char *group;
+
+               group_list = linked_list_create();
+               enumerator = enumerator_create_token(groups, ",", " ");
+               while (enumerator->enumerate(enumerator, &group))
+               {
+                       group_list->insert_last(group_list, strdup(group));
+               }
+               enumerator->destroy(enumerator);
+
                /* read the serial number and increment it by one */
                serial = read_serial();
 
@@ -504,10 +516,11 @@ int main(int argc, char **argv)
                                                        BUILD_NOT_BEFORE_TIME, notBefore,
                                                        BUILD_NOT_AFTER_TIME, notAfter,
                                                        BUILD_SERIAL, serial,
-                                                       BUILD_IETF_GROUP_ATTR, groups,
+                                                       BUILD_AC_GROUP_STRINGS, group_list,
                                                        BUILD_SIGNING_CERT, signerCert,
                                                        BUILD_SIGNING_KEY, signerKey,
                                                        BUILD_END);
+               group_list->destroy_function(group_list, free);
                if (!attr_cert)
                {
                        goto end;