wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-31 19:24:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

skip DATE if flags is set when calling AddTrustedPeer

Browse Source
This commit is contained in:
Hideki Miyazaki
2023-10-14 13:15:00 +09:00
parent c23559a91c
commit 8d9dc3d79f
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/ssl.c
View File

@@ -7230,10 +7230,10 @@ int ProcessBuffer(WOLFSSL_CTX* ctx, const unsigned char* buff,
else if (type == TRUSTED_PEER_TYPE) { else if (type == TRUSTED_PEER_TYPE) {
/* add trusted peer cert. der is freed within */ /* add trusted peer cert. der is freed within */
if (ctx != NULL) if (ctx != NULL)
ret = AddTrustedPeer(ctx->cm, &der, !ctx->verifyNone); ret = AddTrustedPeer(ctx->cm, &der, verify);
else { else {
SSL_CM_WARNING(ssl); SSL_CM_WARNING(ssl);
ret = AddTrustedPeer(SSL_CM(ssl), &der, !ssl->options.verifyNone); ret = AddTrustedPeer(SSL_CM(ssl), &der, verify);
} }
if (ret != WOLFSSL_SUCCESS) { if (ret != WOLFSSL_SUCCESS) {
WOLFSSL_MSG("Error adding trusted peer"); WOLFSSL_MSG("Error adding trusted peer");
@@ -15640,13 +15640,19 @@ int wolfSSL_set_compression(WOLFSSL* ssl)
if (sz < 0 || in == NULL || ctx == NULL) { if (sz < 0 || in == NULL || ctx == NULL) {
return BAD_FUNC_ARG; return BAD_FUNC_ARG;
} }
int verify;
verify = GET_VERIFY_SETTING_CTX(ctx);
if (WOLFSSL_LOAD_VERIFY_DEFAULT_FLAGS &
WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY)
verify = VERIFY_SKIP_DATE;
if (format == WOLFSSL_FILETYPE_PEM) if (format == WOLFSSL_FILETYPE_PEM)
return ProcessChainBuffer(ctx, in, sz, format, TRUSTED_PEER_TYPE, return ProcessChainBuffer(ctx, in, sz, format, TRUSTED_PEER_TYPE,
NULL, GET_VERIFY_SETTING_CTX(ctx)); NULL, verify);
else else
return ProcessBuffer(ctx, in, sz, format, TRUSTED_PEER_TYPE, NULL, return ProcessBuffer(ctx, in, sz, format, TRUSTED_PEER_TYPE, NULL,
NULL, 0, GET_VERIFY_SETTING_CTX(ctx)); NULL, 0, verify);
} }
#endif /* WOLFSSL_TRUST_PEER_CERT */ #endif /* WOLFSSL_TRUST_PEER_CERT */