diff options
| author | Nick Mathewson <nickm@torproject.org> | 2011-09-22 10:01:41 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2011-10-10 23:14:17 -0400 |
| commit | 9a77ebc794cff2df50bb2d47788461864f4bc8c9 (patch) | |
| tree | 099199f58e6e19b7d11cfc7e474b4aacf2788e38 /src/or/command.c | |
| parent | 3f22ec179c6f90b9c2af9483e2c8000132d2f33e (diff) | |
| download | tor-9a77ebc794cff2df50bb2d47788461864f4bc8c9.tar.gz tor-9a77ebc794cff2df50bb2d47788461864f4bc8c9.zip | |
Make tor_tls_cert_is_valid check key lengths
Diffstat (limited to 'src/or/command.c')
| -rw-r--r-- | src/or/command.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/or/command.c b/src/or/command.c index aad971fc91..a32671f0b9 100644 --- a/src/or/command.c +++ b/src/or/command.c @@ -745,9 +745,9 @@ command_process_cert_cell(var_cell_t *cell, or_connection_t *conn) if (! tor_tls_cert_matches_key(conn->tls, link_cert)) { ERR("The link certificate didn't match the TLS public key"); } - if (! tor_tls_cert_is_valid(link_cert, id_cert)) + if (! tor_tls_cert_is_valid(link_cert, id_cert, 0)) ERR("The link certificate was not valid"); - if (! tor_tls_cert_is_valid(id_cert, id_cert)) + if (! tor_tls_cert_is_valid(id_cert, id_cert, 1)) ERR("The ID certificate was not valid"); /* XXXX okay, we just got authentication. Do something about that. */ @@ -761,9 +761,9 @@ command_process_cert_cell(var_cell_t *cell, or_connection_t *conn) /* Remember these certificates so we can check an AUTHENTICATE cell */ conn->handshake_state->id_cert = id_cert; conn->handshake_state->auth_cert = auth_cert; - if (! tor_tls_cert_is_valid(auth_cert, id_cert)) + if (! tor_tls_cert_is_valid(auth_cert, id_cert, 1)) ERR("The authentication certificate was not valid"); - if (! tor_tls_cert_is_valid(id_cert, id_cert)) + if (! tor_tls_cert_is_valid(id_cert, id_cert, 1)) ERR("The ID certificate was not valid"); /* XXXX check more stuff? */ |