[openca-cvsdev] CVS: openca-0.9/src/ocspd/src config.h,1.13,1.14 ocsp_response.c,1.9,1.10

[<ope...@li...>]

Update of /cvsroot/openca/openca-0.9/src/ocspd/src
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv26780/src

Modified Files:
	config.h ocsp_response.c 
Log Message:

Minor fixes to enhance compatibility with CISCO OCSP clients.

	--- madwolf




Author of changes:  madwolf


Index: ocsp_response.c
===================================================================
RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/ocsp_response.c,v
retrieving revision 1.9
retrieving revision 1.10
diff -C2 -d -r1.9 -r1.10
*** ocsp_response.c	6 Oct 2005 10:24:39 -0000	1.9
--- ocsp_response.c	24 Apr 2006 10:30:23 -0000	1.10
***************
*** 147,166 ****
  
  			/* Check and add the invalidity date */
! 			if ( entry->extensions )
! 				OCSP_SINGLERESP_add1_ext_i2d(single, 
! 					NID_invalidity_date, X509_REVOKED_get_ext_d2i( entry, NID_invalidity_date, NULL, NULL ), 0, 0);
  
- #ifdef DEBUG
  			if( verbose )
  				syslog( LOG_INFO, "Status for %ld is REVOKED",
  						ASN1_INTEGER_get(serial) );
- #endif
  		} else if (ca == NULL ) {
- #ifdef DEBUG
  			if( verbose ) {
  				syslog( LOG_INFO, "status unknown for %ld ",
  					ASN1_INTEGER_get(serial) );
  			}
- #endif
  			OCSP_basic_add1_status(bs, cid,
  				V_OCSP_CERTSTATUS_UNKNOWN,0,NULL,
--- 147,169 ----
  
  			/* Check and add the invalidity date */
! 			if ( entry->extensions ) {
! 				void *ext = NULL;
! 
! 				ext = X509_REVOKED_get_ext_d2i( entry, 
! 					NID_invalidity_date, NULL, NULL );
! 				if ( ext != NULL ) {
! 					OCSP_SINGLERESP_add1_ext_i2d(single, 
! 						NID_invalidity_date, ext, 0, 0);
! 				}
! 			}
  
  			if( verbose )
  				syslog( LOG_INFO, "Status for %ld is REVOKED",
  						ASN1_INTEGER_get(serial) );
  		} else if (ca == NULL ) {
  			if( verbose ) {
  				syslog( LOG_INFO, "status unknown for %ld ",
  					ASN1_INTEGER_get(serial) );
  			}
  			OCSP_basic_add1_status(bs, cid,
  				V_OCSP_CERTSTATUS_UNKNOWN,0,NULL,
***************
*** 168,177 ****
  
  		} else {
- #ifdef DEBUG
  			if( verbose ) {
  				syslog( LOG_INFO, "status VALID for %ld",
  					ASN1_INTEGER_get(serial) );
  			}
- #endif
  			
  			OCSP_basic_add1_status(bs, cid,
--- 171,178 ----