Commit 765a35d0 authored by npzacs's avatar npzacs
Browse files

Check host certificates against latest seen revocation list

parent 6ff177ea
......@@ -5,6 +5,7 @@
- Fixed memory leaks
- Fixed buffer overflow
- Added revocation list caching
- Check host certificates against latest seen revocation list
2012-03-21: Version 0.3.1
- Added configure option for libgcrypt prefix
......
......@@ -289,6 +289,13 @@ static int _read_vid(AACS *aacs, cert_list *hcl)
continue;
}
if (mkb_host_cert_is_revoked(hrl_mkb, cert + 4)) {
DEBUG(DBG_AACS | DBG_CRIT, "Host certificate %s has been revoked.\n",
print_hex(tmp_str, cert + 4, 6));
error_code = AACS_ERROR_CERT_REVOKED;
//continue;
}
DEBUG(DBG_AACS, "Trying host certificate (id 0x%s)...\n",
print_hex(tmp_str, cert + 4, 6));
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment