Lines 51-57
Link Here
|
51 |
NOEXPORT int verify_callback(int, X509_STORE_CTX *); |
51 |
NOEXPORT int verify_callback(int, X509_STORE_CTX *); |
52 |
NOEXPORT int verify_checks(CLI *, int, X509_STORE_CTX *); |
52 |
NOEXPORT int verify_checks(CLI *, int, X509_STORE_CTX *); |
53 |
NOEXPORT int cert_check(CLI *, X509_STORE_CTX *, int); |
53 |
NOEXPORT int cert_check(CLI *, X509_STORE_CTX *, int); |
54 |
#if OPENSSL_VERSION_NUMBER>=0x10002000L |
54 |
#if OPENSSL_VERSION_NUMBER>=0x10002000L && !defined(LIBRESSL_VERSION_NUMBER) |
55 |
NOEXPORT int cert_check_subject(CLI *, X509_STORE_CTX *); |
55 |
NOEXPORT int cert_check_subject(CLI *, X509_STORE_CTX *); |
56 |
#endif /* OPENSSL_VERSION_NUMBER>=0x10002000L */ |
56 |
#endif /* OPENSSL_VERSION_NUMBER>=0x10002000L */ |
57 |
NOEXPORT int cert_check_local(X509_STORE_CTX *); |
57 |
NOEXPORT int cert_check_local(X509_STORE_CTX *); |
Lines 280-286
Link Here
|
280 |
} |
280 |
} |
281 |
|
281 |
|
282 |
if(depth==0) { /* additional peer certificate checks */ |
282 |
if(depth==0) { /* additional peer certificate checks */ |
283 |
#if OPENSSL_VERSION_NUMBER>=0x10002000L |
283 |
#if OPENSSL_VERSION_NUMBER>=0x10002000L && !defined(LIBRESSL_VERSION_NUMBER) |
284 |
if(!cert_check_subject(c, callback_ctx)) |
284 |
if(!cert_check_subject(c, callback_ctx)) |
285 |
return 0; /* reject */ |
285 |
return 0; /* reject */ |
286 |
#endif /* OPENSSL_VERSION_NUMBER>=0x10002000L */ |
286 |
#endif /* OPENSSL_VERSION_NUMBER>=0x10002000L */ |
Lines 291-297
Link Here
|
291 |
return 1; /* accept */ |
291 |
return 1; /* accept */ |
292 |
} |
292 |
} |
293 |
|
293 |
|
294 |
#if OPENSSL_VERSION_NUMBER>=0x10002000L |
294 |
#if OPENSSL_VERSION_NUMBER>=0x10002000L && !defined(LIBRESSL_VERSION_NUMBER) |
295 |
NOEXPORT int cert_check_subject(CLI *c, X509_STORE_CTX *callback_ctx) { |
295 |
NOEXPORT int cert_check_subject(CLI *c, X509_STORE_CTX *callback_ctx) { |
296 |
X509 *cert=X509_STORE_CTX_get_current_cert(callback_ctx); |
296 |
X509 *cert=X509_STORE_CTX_get_current_cert(callback_ctx); |
297 |
NAME_LIST *ptr; |
297 |
NAME_LIST *ptr; |