diff options
| author | inoguchi <> | 2021-07-15 10:15:22 +0000 |
|---|---|---|
| committer | inoguchi <> | 2021-07-15 10:15:22 +0000 |
| commit | 726f5c0bc40668607a34efc5f6ba365baecc53b2 (patch) | |
| tree | d9afb2e743d64f0c1143ee57e8a2174f87cad6e3 /src | |
| parent | 174f2ffd983f36fed849facf7e7aaf30866d10d7 (diff) | |
| download | openbsd-726f5c0bc40668607a34efc5f6ba365baecc53b2.tar.gz openbsd-726f5c0bc40668607a34efc5f6ba365baecc53b2.tar.bz2 openbsd-726f5c0bc40668607a34efc5f6ba365baecc53b2.zip | |
Use 'serial' rather than 'ser' in ca.c
input from jsing@
Diffstat (limited to 'src')
| -rw-r--r-- | src/usr.bin/openssl/ca.c | 38 |
1 files changed, 19 insertions, 19 deletions
diff --git a/src/usr.bin/openssl/ca.c b/src/usr.bin/openssl/ca.c index 8d1ea25470..038fe86be9 100644 --- a/src/usr.bin/openssl/ca.c +++ b/src/usr.bin/openssl/ca.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ca.c,v 1.29 2021/07/15 09:56:32 inoguchi Exp $ */ | 1 | /* $OpenBSD: ca.c,v 1.30 2021/07/15 10:15:22 inoguchi Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -151,7 +151,7 @@ static int do_body(X509 ** xret, EVP_PKEY * pkey, X509 * x509, | |||
| 151 | char *ext_sect, CONF * conf, unsigned long certopt, unsigned long nameopt, | 151 | char *ext_sect, CONF * conf, unsigned long certopt, unsigned long nameopt, |
| 152 | int default_op, int ext_copy, int selfsign); | 152 | int default_op, int ext_copy, int selfsign); |
| 153 | static int do_revoke(X509 * x509, CA_DB * db, int ext, char *extval); | 153 | static int do_revoke(X509 * x509, CA_DB * db, int ext, char *extval); |
| 154 | static int get_certificate_status(const char *ser_status, CA_DB * db); | 154 | static int get_certificate_status(const char *serial, CA_DB * db); |
| 155 | static int do_updatedb(CA_DB * db); | 155 | static int do_updatedb(CA_DB * db); |
| 156 | static int check_time_format(const char *str); | 156 | static int check_time_format(const char *str); |
| 157 | static char * bin2hex(unsigned char *, size_t); | 157 | static char * bin2hex(unsigned char *, size_t); |
| @@ -167,7 +167,7 @@ static struct { | |||
| 167 | char *certfile; | 167 | char *certfile; |
| 168 | unsigned long chtype; | 168 | unsigned long chtype; |
| 169 | char *configfile; | 169 | char *configfile; |
| 170 | int create_ser; | 170 | int create_serial; |
| 171 | char *crl_ext; | 171 | char *crl_ext; |
| 172 | long crldays; | 172 | long crldays; |
| 173 | long crlhours; | 173 | long crlhours; |
| @@ -198,7 +198,7 @@ static struct { | |||
| 198 | int req; | 198 | int req; |
| 199 | char *rev_arg; | 199 | char *rev_arg; |
| 200 | int rev_type; | 200 | int rev_type; |
| 201 | char *ser_status; | 201 | char *serial_status; |
| 202 | char *section; | 202 | char *section; |
| 203 | int selfsign; | 203 | int selfsign; |
| 204 | STACK_OF(OPENSSL_STRING) * sigopts; | 204 | STACK_OF(OPENSSL_STRING) * sigopts; |
| @@ -329,7 +329,7 @@ static const struct option ca_options[] = { | |||
| 329 | .name = "create_serial", | 329 | .name = "create_serial", |
| 330 | .desc = "If reading serial fails, create a new random serial", | 330 | .desc = "If reading serial fails, create a new random serial", |
| 331 | .type = OPTION_FLAG, | 331 | .type = OPTION_FLAG, |
| 332 | .opt.flag = &ca_config.create_ser, | 332 | .opt.flag = &ca_config.create_serial, |
| 333 | }, | 333 | }, |
| 334 | { | 334 | { |
| 335 | .name = "crl_CA_compromise", | 335 | .name = "crl_CA_compromise", |
| @@ -577,7 +577,7 @@ static const struct option ca_options[] = { | |||
| 577 | .argname = "serial", | 577 | .argname = "serial", |
| 578 | .desc = "Shows certificate status given the serial number", | 578 | .desc = "Shows certificate status given the serial number", |
| 579 | .type = OPTION_ARG, | 579 | .type = OPTION_ARG, |
| 580 | .opt.arg = &ca_config.ser_status, | 580 | .opt.arg = &ca_config.serial_status, |
| 581 | }, | 581 | }, |
| 582 | { | 582 | { |
| 583 | .name = "subj", | 583 | .name = "subj", |
| @@ -674,7 +674,7 @@ ca_main(int argc, char **argv) | |||
| 674 | X509_CRL *crl = NULL; | 674 | X509_CRL *crl = NULL; |
| 675 | X509_REVOKED *r = NULL; | 675 | X509_REVOKED *r = NULL; |
| 676 | ASN1_TIME *tmptm; | 676 | ASN1_TIME *tmptm; |
| 677 | ASN1_INTEGER *tmpser; | 677 | ASN1_INTEGER *tmpserial; |
| 678 | char *f; | 678 | char *f; |
| 679 | const char *p; | 679 | const char *p; |
| 680 | char *const * pp; | 680 | char *const * pp; |
| @@ -798,7 +798,7 @@ ca_main(int argc, char **argv) | |||
| 798 | } | 798 | } |
| 799 | /*****************************************************************/ | 799 | /*****************************************************************/ |
| 800 | /* report status of cert with serial number given on command line */ | 800 | /* report status of cert with serial number given on command line */ |
| 801 | if (ca_config.ser_status) { | 801 | if (ca_config.serial_status) { |
| 802 | if ((dbfile = NCONF_get_string(conf, ca_config.section, | 802 | if ((dbfile = NCONF_get_string(conf, ca_config.section, |
| 803 | ENV_DATABASE)) == NULL) { | 803 | ENV_DATABASE)) == NULL) { |
| 804 | lookup_fail(ca_config.section, ENV_DATABASE); | 804 | lookup_fail(ca_config.section, ENV_DATABASE); |
| @@ -811,9 +811,9 @@ ca_main(int argc, char **argv) | |||
| 811 | if (!index_index(db)) | 811 | if (!index_index(db)) |
| 812 | goto err; | 812 | goto err; |
| 813 | 813 | ||
| 814 | if (get_certificate_status(ca_config.ser_status, db) != 1) | 814 | if (get_certificate_status(ca_config.serial_status, db) != 1) |
| 815 | BIO_printf(bio_err, "Error verifying serial %s!\n", | 815 | BIO_printf(bio_err, "Error verifying serial %s!\n", |
| 816 | ca_config.ser_status); | 816 | ca_config.serial_status); |
| 817 | goto err; | 817 | goto err; |
| 818 | } | 818 | } |
| 819 | /*****************************************************************/ | 819 | /*****************************************************************/ |
| @@ -1131,7 +1131,7 @@ ca_main(int argc, char **argv) | |||
| 1131 | "cannot lookup how many days to certify for\n"); | 1131 | "cannot lookup how many days to certify for\n"); |
| 1132 | goto err; | 1132 | goto err; |
| 1133 | } | 1133 | } |
| 1134 | if ((serial = load_serial(serialfile, ca_config.create_ser, NULL)) == | 1134 | if ((serial = load_serial(serialfile, ca_config.create_serial, NULL)) == |
| 1135 | NULL) { | 1135 | NULL) { |
| 1136 | BIO_printf(bio_err, | 1136 | BIO_printf(bio_err, |
| 1137 | "error while loading serial number\n"); | 1137 | "error while loading serial number\n"); |
| @@ -1403,13 +1403,13 @@ ca_main(int argc, char **argv) | |||
| 1403 | crl_v2 = 1; | 1403 | crl_v2 = 1; |
| 1404 | if (!BN_hex2bn(&serial, pp[DB_serial])) | 1404 | if (!BN_hex2bn(&serial, pp[DB_serial])) |
| 1405 | goto err; | 1405 | goto err; |
| 1406 | tmpser = BN_to_ASN1_INTEGER(serial, NULL); | 1406 | tmpserial = BN_to_ASN1_INTEGER(serial, NULL); |
| 1407 | BN_free(serial); | 1407 | BN_free(serial); |
| 1408 | serial = NULL; | 1408 | serial = NULL; |
| 1409 | if (!tmpser) | 1409 | if (!tmpserial) |
| 1410 | goto err; | 1410 | goto err; |
| 1411 | X509_REVOKED_set_serialNumber(r, tmpser); | 1411 | X509_REVOKED_set_serialNumber(r, tmpserial); |
| 1412 | ASN1_INTEGER_free(tmpser); | 1412 | ASN1_INTEGER_free(tmpserial); |
| 1413 | X509_CRL_add0_revoked(crl, r); | 1413 | X509_CRL_add0_revoked(crl, r); |
| 1414 | } | 1414 | } |
| 1415 | } | 1415 | } |
| @@ -1435,12 +1435,12 @@ ca_main(int argc, char **argv) | |||
| 1435 | ca_config.crl_ext, crl)) | 1435 | ca_config.crl_ext, crl)) |
| 1436 | goto err; | 1436 | goto err; |
| 1437 | if (crlnumberfile != NULL) { | 1437 | if (crlnumberfile != NULL) { |
| 1438 | tmpser = BN_to_ASN1_INTEGER(crlnumber, NULL); | 1438 | tmpserial = BN_to_ASN1_INTEGER(crlnumber, NULL); |
| 1439 | if (!tmpser) | 1439 | if (!tmpserial) |
| 1440 | goto err; | 1440 | goto err; |
| 1441 | X509_CRL_add1_ext_i2d(crl, NID_crl_number, | 1441 | X509_CRL_add1_ext_i2d(crl, NID_crl_number, |
| 1442 | tmpser, 0, 0); | 1442 | tmpserial, 0, 0); |
| 1443 | ASN1_INTEGER_free(tmpser); | 1443 | ASN1_INTEGER_free(tmpserial); |
| 1444 | crl_v2 = 1; | 1444 | crl_v2 = 1; |
| 1445 | if (!BN_add_word(crlnumber, 1)) | 1445 | if (!BN_add_word(crlnumber, 1)) |
| 1446 | goto err; | 1446 | goto err; |
