Make results of (ext)KeyUsage accessible
This commit is contained in:
parent
770b5e1e9e
commit
e16b62c3a9
5 changed files with 44 additions and 7 deletions
|
@ -829,6 +829,7 @@ static int ssl_pick_cert( ssl_context *ssl,
|
|||
{
|
||||
ssl_key_cert *cur, *list, *fallback = NULL;
|
||||
pk_type_t pk_alg = ssl_get_ciphersuite_sig_pk_alg( ciphersuite_info );
|
||||
int flags;
|
||||
|
||||
#if defined(POLARSSL_SSL_SERVER_NAME_INDICATION)
|
||||
if( ssl->handshake->sni_key_cert != NULL )
|
||||
|
@ -862,7 +863,7 @@ static int ssl_pick_cert( ssl_context *ssl,
|
|||
* and decrypting with the same RSA key.
|
||||
*/
|
||||
if( ssl_check_cert_usage( cur->cert, ciphersuite_info,
|
||||
SSL_IS_SERVER ) != 0 )
|
||||
SSL_IS_SERVER, &flags ) != 0 )
|
||||
{
|
||||
SSL_DEBUG_MSG( 3, ( "certificate mismatch: "
|
||||
"(extended) key usage extension" ) );
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue