diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-11-24 09:53:58 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-11-25 10:37:07 +0100 |
| commit | 95e1cbc9a66161a9f60bd4f0db3c6cb4c6a7e690 (patch) | |
| tree | 9ed050c078ab457709c20f341609e5396013f376 /lib | |
| parent | b05f7a0e30cf71f13efce8b57675bfbc4daec448 (diff) | |
| download | gnutls-95e1cbc9a66161a9f60bd4f0db3c6cb4c6a7e690.tar.gz | |
pkcs7: added debug logging on verification discovery
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/x509/pkcs7.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/x509/pkcs7.c b/lib/x509/pkcs7.c index b87dc7a3ca..a6466126f3 100644 --- a/lib/x509/pkcs7.c +++ b/lib/x509/pkcs7.c @@ -1140,13 +1140,16 @@ gnutls_x509_crt_t find_signer(gnutls_pkcs7_t pkcs7, gnutls_x509_trust_list_t tl, goto fail; } + if (serial_size != info->signer_serial.size || memcmp(info->signer_serial.data, serial, serial_size) != 0) { + _gnutls_cert_log("doesn't match serial", crt); gnutls_assert(); goto skip; } + _gnutls_cert_log("verifying with", crt); ret = gnutls_x509_trust_list_verify_crt2(tl, &crt, 1, vdata, vdata_size, 0, &vtmp, |