From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 22 Jun 2021 08:35:10 +0000 (+0200)
Subject: pubkey: Ignore X.509 flags passed to the parser
X-Git-Tag: 5.9.4dr2~16^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5821f2cc0164f2731e039260a16408f2b307e19c;p=thirdparty%2Fstrongswan.git

pubkey: Ignore X.509 flags passed to the parser
---

diff --git a/src/libstrongswan/plugins/pubkey/pubkey_cert.c b/src/libstrongswan/plugins/pubkey/pubkey_cert.c
index 68866d2ad5..1777858659 100644
--- a/src/libstrongswan/plugins/pubkey/pubkey_cert.c
+++ b/src/libstrongswan/plugins/pubkey/pubkey_cert.c
@@ -17,6 +17,7 @@
 
 #include <time.h>
 
+#include <credentials/certificates/x509.h>
 #include <utils/debug.h>
 
 typedef struct private_pubkey_cert_t private_pubkey_cert_t;
@@ -291,6 +292,10 @@ pubkey_cert_t *pubkey_cert_wrap(certificate_type_t type, va_list args)
 			case BUILD_SUBJECT:
 				subject = va_arg(args, identification_t*);
 				continue;
+			case BUILD_X509_FLAG:
+				/* just ignore the flags */
+				va_arg(args, x509_flag_t);
+				continue;
 			case BUILD_END:
 				break;
 			default:
@@ -313,4 +318,3 @@ pubkey_cert_t *pubkey_cert_wrap(certificate_type_t type, va_list args)
 	}
 	return NULL;
 }
-