fix openssl CRL loading

SVN revision: 52971
This commit is contained in:
Mike Blumenkrantz 2010-10-02 01:32:05 +00:00
parent be56560d7d
commit 2516eec5f8
1 changed files with 6 additions and 10 deletions

View File

@ -1063,21 +1063,17 @@ error:
static Eina_Bool static Eina_Bool
_ecore_con_ssl_server_crl_add_openssl(Ecore_Con_Server *svr, const char *crl_file) _ecore_con_ssl_server_crl_add_openssl(Ecore_Con_Server *svr, const char *crl_file)
{ {
FILE *fp = NULL; X509_STORE *st;
X509_CRL *crl = NULL; X509_LOOKUP *lu;
if (!(fp = fopen(crl_file, "r"))) SSL_ERROR_CHECK_GOTO_ERROR(!(st = SSL_CTX_get_cert_store(svr->ssl_ctx)));
goto error; SSL_ERROR_CHECK_GOTO_ERROR(!(lu = X509_STORE_add_lookup(st, X509_LOOKUP_file())));
#warning IMPLEMENT FIXME! SSL_ERROR_CHECK_GOTO_ERROR(X509_load_crl_file(lu, crl_file, X509_FILETYPE_PEM) < 1);
SSL_ERROR_CHECK_GOTO_ERROR(!(crl = PEM_read_X509_CRL(fp, NULL, NULL, NULL))); SSL_ERROR_CHECK_GOTO_ERROR(!X509_STORE_set_flags(st, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL));
fclose(fp);
return EINA_TRUE; return EINA_TRUE;
error: error:
if (fp)
fclose(fp);
_openssl_print_errors(); _openssl_print_errors();
return EINA_FALSE; return EINA_FALSE;
} }