From: Martin Willi <martin@revosec.ch>
Date: Thu, 9 Dec 2010 12:34:17 +0000 (+0100)
Subject: pki --print prints NameConstraints
X-Git-Tag: 4.5.1~198
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=64bcaae20316ed65f1c2a289afd2e30d922543b2;p=thirdparty%2Fstrongswan.git

pki --print prints NameConstraints
---

diff --git a/src/pki/commands/print.c b/src/pki/commands/print.c
index 35fdaac952..0eb51ccda7 100644
--- a/src/pki/commands/print.c
+++ b/src/pki/commands/print.c
@@ -178,6 +178,31 @@ static void print_x509(x509_t *x509)
 		printf("pathlen:   %d\n", len);
 	}
 
+	first = TRUE;
+	enumerator = x509->create_name_constraint_enumerator(x509, TRUE);
+	while (enumerator->enumerate(enumerator, &id))
+	{
+		if (first)
+		{
+			printf("Permitted NameConstraints:\n");
+			first = FALSE;
+		}
+		printf("           %Y\n", id);
+	}
+	enumerator->destroy(enumerator);
+	first = TRUE;
+	enumerator = x509->create_name_constraint_enumerator(x509, FALSE);
+	while (enumerator->enumerate(enumerator, &id))
+	{
+		if (first)
+		{
+			printf("Excluded NameConstraints:\n");
+			first = FALSE;
+		}
+		printf("           %Y\n", id);
+	}
+	enumerator->destroy(enumerator);
+
 	chunk = x509->get_authKeyIdentifier(x509);
 	if (chunk.ptr)
 	{