]> git.ipfire.org Git - thirdparty/strongswan.git/commit
x509: Correctly parse responderId as ASN.1 CHOICE in OCSP response
authorTobias Brunner <tobias@strongswan.org>
Thu, 23 Nov 2023 15:52:55 +0000 (16:52 +0100)
committerTobias Brunner <tobias@strongswan.org>
Fri, 24 Nov 2023 16:41:18 +0000 (17:41 +0100)
commite7a58f46f97583a532b481bb1805aeb5208af565
tree8d9ab56883595a7b73b17802c9b1e4aa3acde3a0
parent585c40095a3a92e058c5d1d61137232f17f72195
x509: Correctly parse responderId as ASN.1 CHOICE in OCSP response

The two OPTs that were used previously allowed to omit it completely (hence
the fallback to ID_ANY), but that's invalid, so it's better to fail
parsing.
src/libstrongswan/plugins/x509/x509_ocsp_response.c