wt/mongoose
1
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-10-01 05:52:32 +07:00
Code Issues Packages Projects Releases Wiki Activity

verify chain in bundle

Browse Source
This commit is contained in:
Sergio R. Caprile
2026-08-04 11:59:22 -03:00
parent 5e733a1461
commit 2988bc9df3
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mongoose.c
+5 -1
View File
@@ -18237,7 +18237,11 @@ static int mg_tls_recv_cert(struct mg_connection *c, bool is_client) {
mg_error(c, r < 0 ? "failed to parse CA bundle"
: "failed to find issuing CA in bundle");
return -1;
} // else r > 0 => issuer found
} else if (!ca.is_ca || // candidate issuer found
!mg_tls_verify_cert_signature(&certs[certnum - 1], &ca)) {
mg_error(c, "failed to verify CA");
return -1;
} // issuer verified. NOTE(): may fail if two diff CAs share a CN
MG_VERBOSE(("CA serial: %M", mg_print_hex, ca.sn.len, ca.sn.buf));
}
if (!found_ca && tls->ca_der.len > 0) { // single cert or server
src/tls_builtin.c
+5 -1
View File
@@ -1892,7 +1892,11 @@ static int mg_tls_recv_cert(struct mg_connection *c, bool is_client) {
mg_error(c, r < 0 ? "failed to parse CA bundle"
: "failed to find issuing CA in bundle");
return -1;
} // else r > 0 => issuer found
} else if (!ca.is_ca || // candidate issuer found
!mg_tls_verify_cert_signature(&certs[certnum - 1], &ca)) {
mg_error(c, "failed to verify CA");
return -1;
} // issuer verified. NOTE(): may fail if two diff CAs share a CN
MG_VERBOSE(("CA serial: %M", mg_print_hex, ca.sn.len, ca.sn.buf));
}
if (!found_ca && tls->ca_der.len > 0) { // single cert or server