Beispiel #1
0
static void set_rev_params(CERTRevocationFlags *rev, PRBool crl,
						     PRBool ocsp,
						     PRBool strict)
{
	CERTRevocationTests *rt = &rev->leafTests;
	PRUint64 *rf = rt->cert_rev_flags_per_method;

	rt->number_of_defined_methods = 0;
	rt->number_of_preferred_methods = 0;

	if (crl) {
		rf[cert_revocation_method_crl] = rev_val_flags(strict);
		rt->number_of_defined_methods++;
	}
	if (ocsp) {
		rf[cert_revocation_method_ocsp] = rev_val_flags(strict);
		rt->number_of_defined_methods++;
	}
}
Beispiel #2
0
static void set_rev_params(CERTRevocationFlags *rev, bool crl_strict,
						     bool ocsp,
						     bool ocsp_strict)
{
	CERTRevocationTests *rt = &rev->leafTests;
	PRUint64 *rf = rt->cert_rev_flags_per_method;
	DBG(DBG_X509, DBG_log("crl_strict: %d, ocsp: %d, ocsp_strict: %d",
				crl_strict, ocsp, ocsp_strict));

	rt->number_of_defined_methods = cert_revocation_method_count;
	rt->number_of_preferred_methods = 0;

	rf[cert_revocation_method_crl] |= CERT_REV_M_TEST_USING_THIS_METHOD;
	rf[cert_revocation_method_crl] |= CERT_REV_M_FORBID_NETWORK_FETCHING;

	if (ocsp) {
		rf[cert_revocation_method_ocsp] = rev_val_flags(ocsp_strict);
	}
}