sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-06 00:00:47 -04:00
Code Issues Projects Releases Wiki Activity

Avoid enumerating certificates with non-matching key type

Browse Source 
If the key type was specified but the ID was NULL or matched a subject, it
was possible that a certificate was returned that didn't actually match
the requested key type.

Closes strongswan/strongswan#141.
This commit is contained in:
SophieK 2019-05-21 09:28:21 +08:00 committed by Tobias Brunner
parent 55dd0361b8
commit 3aa7b2dc3a
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/libcharon/plugins/stroke/stroke_ca.c
View File

@ -208,6 +208,11 @@ CALLBACK(certs_filter, bool,
return TRUE;
}
}
else
{
public->destroy(public);
continue;
}
public->destroy(public);
}
else if (data->key != KEY_ANY)

5
src/libstrongswan/credentials/sets/mem_cred.c
View File

@ -108,6 +108,11 @@ CALLBACK(certs_filter, bool,
return TRUE;
}
}
else
{
public->destroy(public);
continue;
}
public->destroy(public);
}
else if (data->key != KEY_ANY)