From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Tue, 4 Apr 2017 14:25:47 +0000 (+0200)
Subject: x509: output the inhibit anyPolicy value
X-Git-Tag: gnutls_3_6_0~692
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7cc1a60e6073d775af561f94cd9828ffd5de0abe;p=thirdparty%2Fgnutls.git

x509: output the inhibit anyPolicy value

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
---

diff --git a/lib/x509/output.c b/lib/x509/output.c
index fddf7be907..e006db233c 100644
--- a/lib/x509/output.c
+++ b/lib/x509/output.c
@@ -975,6 +975,23 @@ static void print_extension(gnutls_buffer_st * str, const char *prefix,
 			}
 		}
 		gnutls_x509_policies_deinit(policies);
+	} else if (strcmp(oid, "2.5.29.54") == 0) {
+		unsigned int skipcerts;
+
+		err = gnutls_x509_ext_import_inhibit_anypolicy(der, &skipcerts);
+		if (err < 0) {
+			addf(str,
+			     "error: certificate inhibit any policy import: %s\n",
+			     gnutls_strerror(err));
+			return;
+		}
+
+		addf(str,
+		     "%s\t\tInhibit anyPolicy skip certs: %u (%s)\n",
+			     prefix, skipcerts,
+			     critical ? _("critical") :
+			     _("not critical"));
+
 	} else if (strcmp(oid, "2.5.29.35") == 0) {
 
 		if (idx->aki) {