narenas
/
opengnsys_ipxe
mirror of https://github.com/ipxe/ipxe.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[crypto] Add x509_is_self_signed() helper function 

Signed-off-by: Michael Brown <mcb30@ipxe.org>
pull/1152/head
Michael Brown 2024-02-15 12:43:51 +00:00
parent 3e721e0c08
commit 943d75b557
3 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/include/ipxe/x509.h
View File

@ -374,6 +374,16 @@ x509_root_put ( struct x509_root *root ) {
ref_put ( &root->refcnt ); ref_put ( &root->refcnt );
} }
/**
* Check if X.509 certificate is self-signed
*
* @v cert X.509 certificate
* @ret is_self_signed X.509 certificate is self-signed
*/
static inline int x509_is_self_signed ( struct x509_certificate *cert ) {
return ( asn1_compare ( &cert->issuer.raw, &cert->subject.raw ) == 0 );
}
extern const char * x509_name ( struct x509_certificate *cert ); extern const char * x509_name ( struct x509_certificate *cert );
extern int x509_parse ( struct x509_certificate *cert, extern int x509_parse ( struct x509_certificate *cert,
const struct asn1_cursor *raw ); const struct asn1_cursor *raw );

2
src/net/validator.c
View File

@ -595,7 +595,7 @@ static void validator_step ( struct validator *validator ) {
* nothing more to do. * nothing more to do.
*/ */
last = x509_last ( validator->chain ); last = x509_last ( validator->chain );
if ( asn1_compare ( &last->issuer.raw, &last->subject.raw ) == 0 ) { if ( x509_is_self_signed ( last ) ) {
validator_finished ( validator, rc ); validator_finished ( validator, rc );
return; return;
} }

4
src/tests/x509_test.c
View File

@ -1102,6 +1102,10 @@ static void x509_test_exec ( void ) {
x509_validate_chain_fail_ok ( &server_chain, test_time, x509_validate_chain_fail_ok ( &server_chain, test_time,
&empty_store, &test_root ); &empty_store, &test_root );
/* Check self-signedess */
ok ( x509_is_self_signed ( root_crt.cert ) );
ok ( ! x509_is_self_signed ( intermediate_crt.cert ) );
/* Sanity check */ /* Sanity check */
assert ( list_empty ( &empty_store.links ) ); assert ( list_empty ( &empty_store.links ) );