summaryrefslogtreecommitdiffstats
path: root/ssl_verify_openssl.c
diff options
context:
space:
mode:
authorAdriaan de Jong <dejong@fox-it.com>2011-06-29 13:29:33 +0200
committerDavid Sommerseth <davids@redhat.com>2011-10-21 14:51:45 +0200
commit971790dae113e4665e1508ab17698047e7321c69 (patch)
tree4830c0cac188eb5861cb59d12a5758c997e40f70 /ssl_verify_openssl.c
parent0a67e4621dea40ff5aa292cebbd271633adbf157 (diff)
downloadopenvpn-971790dae113e4665e1508ab17698047e7321c69.tar.gz
openvpn-971790dae113e4665e1508ab17698047e7321c69.tar.xz
openvpn-971790dae113e4665e1508ab17698047e7321c69.zip
Added function to extract and verify the subject from a certificate
Signed-off-by: Adriaan de Jong <dejong@fox-it.com> Acked-by: James Yonan <james@openvpn.net> Signed-off-by: David Sommerseth <davids@redhat.com>
Diffstat (limited to 'ssl_verify_openssl.c')
-rw-r--r--ssl_verify_openssl.c10
1 files changed, 10 insertions, 0 deletions
diff --git a/ssl_verify_openssl.c b/ssl_verify_openssl.c
index 06e1143..64b71c3 100644
--- a/ssl_verify_openssl.c
+++ b/ssl_verify_openssl.c
@@ -72,3 +72,13 @@ verify_callback (int preverify_ok, X509_STORE_CTX * ctx)
return verify_cert(session, ctx->current_cert, ctx->error_depth);
}
+
+int
+verify_get_subject (char **subject, X509 *cert)
+{
+ *subject = X509_NAME_oneline (X509_get_subject_name (cert), NULL, 0);
+ if (!*subject)
+ return 1;
+
+ return 0;
+}