diff options
Diffstat (limited to 'sbin/isakmpd/x509.c')
| -rw-r--r-- | sbin/isakmpd/x509.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/sbin/isakmpd/x509.c b/sbin/isakmpd/x509.c index 72785fc31f7..9eb9ab1fa4c 100644 --- a/sbin/isakmpd/x509.c +++ b/sbin/isakmpd/x509.c @@ -1,4 +1,4 @@ -/* $OpenBSD: x509.c,v 1.34 2000/12/19 19:03:06 mickey Exp $ */ +/* $OpenBSD: x509.c,v 1.35 2001/01/10 20:31:24 angelos Exp $ */ /* $EOM: x509.c,v 1.51 2000/12/12 01:38:38 niklas Exp $ */ /* @@ -114,6 +114,8 @@ x509_generate_kn (X509 *cert) RSA *key; char **new_asserts; + LOG_DBG ((LOG_CRYPTO, 90, "x509_generate_kn: generating KeyNote policy for certificate %p", cert)); + issuer = LC (X509_get_issuer_name, (cert)); subject = LC (X509_get_subject_name, (cert)); @@ -194,6 +196,7 @@ x509_generate_kn (X509 *cert) log_print ("x509_generate_kn: cannot get issuer key"); return 0; } + if (!skey) { free (ikey); @@ -224,6 +227,9 @@ x509_generate_kn (X509 *cert) free (buf); return 0; } + + /* We could print the assertion here, but log_print() truncates... */ + free (buf); if (!LC (X509_NAME_oneline, (issuer, isname, 256))) @@ -256,6 +262,8 @@ x509_generate_kn (X509 *cert) free (buf); return 0; } + else + LOG_DBG ((LOG_CRYPTO, 80, "x509_generate_kn: added policy:\n%s", buf)); /* Store the X509-derived assertion so we can use it as a policy */ if (x509_policy_asserts_num == 0) |