Crash_Override/OVMS3-idf
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

components/openssl: add function to set and get verify depth

Browse source 
1. add function to set and get SSL verify depth
	2. add function to set and get SSL context verify depth
	3. add X509_VERIFY_PARAM structure
This commit is contained in:
dongheng 2016-09-22 15:30:25 +08:00
parent b3145446aa
commit 6f07409d7c
2 changed files with 71 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
components/openssl/include/internal/ssl_types.h
View file

@ -76,6 +76,9 @@ typedef struct cert_st CERT;
struct x509_st;
typedef struct x509_st X509;
struct X509_VERIFY_PARAM_st;
typedef struct X509_VERIFY_PARAM_st X509_VERIFY_PARAM;
struct evp_pkey_st;
typedef struct evp_pkey_st EVP_PKEY;
@ -139,6 +142,12 @@ struct ssl_session_st {
long time;
};
struct X509_VERIFY_PARAM_st {
int depth;
};
struct ssl_ctx_st
{
int version;
@ -164,6 +173,8 @@ struct ssl_ctx_st
int read_ahead;
int read_buffer_len;
X509_VERIFY_PARAM param;
};
struct ssl_st
@ -195,6 +206,8 @@ struct ssl_st
long verify_result;
X509_VERIFY_PARAM param;
int err;
void (*info_callback) (const SSL *ssl, int type, int val);

58
components/openssl/library/ssl_lib.c
View file

@ -1745,3 +1745,61 @@ long SSL_get_verify_result(const SSL *ssl)
return SSL_METHOD_CALL(get_verify_result, ssl);
}
/*
* SSL_CTX_get_verify_depth - get the SSL verifying depth of the SSL context
*
* @param ctx - SSL context point
*
* @return verifying depth
*/
int SSL_CTX_get_verify_depth(const SSL_CTX *ctx)
{
SSL_ASSERT(ctx);
return ctx->param.depth;
}
/*
* SSL_CTX_set_verify_depth - set the SSL verify depth of the SSL context
*
* @param ctx - SSL context point
* @param depth - verifying depth
*
* @return one
*/
void SSL_CTX_set_verify_depth(SSL_CTX *ctx, int depth)
{
SSL_ASSERT(ctx);
ctx->param.depth = depth;
}
/*
* SSL_get_verify_depth - get the SSL verifying depth of the SSL
*
* @param ctx - SSL point
*
* @return verifying depth
*/
int SSL_get_verify_depth(const SSL *ssl)
{
SSL_ASSERT(ssl);
return ssl->param.depth;
}
/*
* SSL_set_verify_depth - set the SSL verify depth of the SSL
*
* @param ctx - SSL point
* @param depth - verifying depth
*
* @return one
*/
void SSL_set_verify_depth(SSL *ssl, int depth)
{
SSL_ASSERT(ssl);
ssl->param.depth = depth;
}