]> git.ipfire.org Git - thirdparty/gnutls.git/commitdiff
guile: Update the list of certificate status values.
authorLudovic Courtès <ludo@gnu.org>
Sat, 31 Aug 2019 14:33:33 +0000 (16:33 +0200)
committerLudovic Courtès <ludo@gnu.org>
Sat, 31 Aug 2019 14:42:39 +0000 (16:42 +0200)
* guile/modules/gnutls/build/enums.scm (%certificate-status-enum): Add
'gnutls_certificate_status_t' values that were missing.
* guile/src/core.c (scm_gnutls_peer_certificate_status): Add
'MATCH_STATUS' clauses to handle them.
* guile/modules/gnutls.in: Export them.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
guile/modules/gnutls.in
guile/modules/gnutls/build/enums.scm
guile/src/core.c

index eed0ffcf8e47c0422c9b01af8dd5b72deff2c48b..7cd08f18f1096780a3003038ad737d65842bce2e 100644 (file)
            certificate-status/signer-not-found
            certificate-status/signer-not-ca
            certificate-status/insecure-algorithm
+           certificate-status/not-activated
+           certificate-status/expired
+           certificate-status/signature-failure
+           certificate-status/revocation-data-superseded
+           certificate-status/unexpected-owner
+           certificate-status/revocation-data-issued-in-future
+           certificate-status/signer-constraints-failed
+           certificate-status/mismatch
+           certificate-status/purpose-mismatch
+           certificate-status/missing-ocsp-status
+           certificate-status/invalid-ocsp-status
+           certificate-status/unknown-crit-extensions
            certificate-request/ignore
            certificate-request/request
            certificate-request/require
index 6554099f0641c2eecb6138a42f0f6f6be3f5edeb..117059b0e39799eddcd9661fb1d06d9364f52dd4 100644 (file)
@@ -395,7 +395,12 @@ unrecognized-name unknown-psk-identity)
 (define %certificate-status-enum
   (make-enum-type 'certificate-status "gnutls_certificate_status_t"
                   '(invalid revoked signer-not-found signer-not-ca
-                    insecure-algorithm)
+                    insecure-algorithm not-activated expired
+                    signature-failure revocation-data-superseded
+                    unexpected-owner revocation-data-issued-in-future
+                    signer-constraints-failure mismatch purpose-mismatch
+                    missing-ocsp-status invalid-ocsp-status
+                    unknown-crit-extensions)
                   #f
                   "GNUTLS_CERT_"))
 
index dc6611a4d77d5cd773f18f035c307845e68b3a29..d78e53bbc9c2ecbfc5a2795924308bf1e9385dc5 100644 (file)
@@ -1895,6 +1895,18 @@ SCM_DEFINE (scm_gnutls_peer_certificate_status, "peer-certificate-status",
   MATCH_STATUS (GNUTLS_CERT_SIGNER_NOT_FOUND);
   MATCH_STATUS (GNUTLS_CERT_SIGNER_NOT_CA);
   MATCH_STATUS (GNUTLS_CERT_INSECURE_ALGORITHM);
+  MATCH_STATUS (GNUTLS_CERT_NOT_ACTIVATED);
+  MATCH_STATUS (GNUTLS_CERT_EXPIRED);
+  MATCH_STATUS (GNUTLS_CERT_SIGNATURE_FAILURE);
+  MATCH_STATUS (GNUTLS_CERT_REVOCATION_DATA_SUPERSEDED);
+  MATCH_STATUS (GNUTLS_CERT_UNEXPECTED_OWNER);
+  MATCH_STATUS (GNUTLS_CERT_REVOCATION_DATA_ISSUED_IN_FUTURE);
+  MATCH_STATUS (GNUTLS_CERT_SIGNER_CONSTRAINTS_FAILURE);
+  MATCH_STATUS (GNUTLS_CERT_MISMATCH);
+  MATCH_STATUS (GNUTLS_CERT_PURPOSE_MISMATCH);
+  MATCH_STATUS (GNUTLS_CERT_MISSING_OCSP_STATUS);
+  MATCH_STATUS (GNUTLS_CERT_INVALID_OCSP_STATUS);
+  MATCH_STATUS (GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS);
 
   if (EXPECT_FALSE (c_status != 0))
     /* XXX: We failed to interpret one of the status flags.  */