check the blacklist for certificates provided in gnutls_x509_trust_list_verify_named_...

diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c
index 820f2879dc7d4a42210775b6ba49dcfd9db0a54f..239ef8257f963422cff2a7918ee34913c67eac64 100644 (file)
--- a/lib/x509/verify-high.c
+++ b/lib/x509/verify-high.c
@@ -829,6 +829,14 @@ gnutls_x509_trust_list_verify_named_crt(gnutls_x509_trust_list_t list,
                          cert->raw_issuer_dn.size);
        hash %= list->size;
 
+       ret = check_if_in_blacklist(&cert, 1,
+               list->blacklisted, list->blacklisted_size);
+       if (ret != 0) {
+               *voutput |= GNUTLS_CERT_REVOKED;
+               *voutput |= GNUTLS_CERT_INVALID;
+               return 0;
+       }
+
        *voutput = GNUTLS_CERT_INVALID | GNUTLS_CERT_SIGNER_NOT_FOUND;
 
        for (i = 0; i < list->node[hash].named_cert_size; i++) {