From 82f925b60c0f029295975e64d9acabb53c0a5e3c Mon Sep 17 00:00:00 2001 From: Adriaan de Jong Date: Thu, 30 Jun 2011 10:10:28 +0200 Subject: Refactored certificate hash lock checks Signed-off-by: Adriaan de Jong Acked-by: James Yonan Signed-off-by: David Sommerseth --- ssl.h | 17 ----------------- 1 file changed, 17 deletions(-) (limited to 'ssl.h') diff --git a/ssl.h b/ssl.h index 2032955..266c2f2 100644 --- a/ssl.h +++ b/ssl.h @@ -218,21 +218,6 @@ */ /* #define MEASURE_TLS_HANDSHAKE_STATS */ -/* - * Keep track of certificate hashes at various depths - */ - -/* Maximum certificate depth we will allow */ -#define MAX_CERT_DEPTH 16 - -struct cert_hash { - unsigned char sha1_hash[SHA_DIGEST_LENGTH]; -}; - -struct cert_hash_set { - struct cert_hash *ch[MAX_CERT_DEPTH]; -}; - #ifdef ENABLE_X509_TRACK struct x509_track @@ -540,14 +525,12 @@ const char *tls_common_name (const struct tls_multi* multi, const bool null); const char *tls_username(const struct tls_multi *multi, const bool null); void tls_set_common_name (struct tls_multi *multi, const char *common_name); void tls_lock_common_name (struct tls_multi *multi); -void tls_lock_cert_hash_set (struct tls_multi *multi); #define TLS_AUTHENTICATION_SUCCEEDED 0 #define TLS_AUTHENTICATION_FAILED 1 #define TLS_AUTHENTICATION_DEFERRED 2 #define TLS_AUTHENTICATION_UNDEFINED 3 int tls_authentication_status (struct tls_multi *multi, const int latency); -void tls_deauthenticate (struct tls_multi *multi); #ifdef MANAGEMENT_DEF_AUTH bool tls_authenticate_key (struct tls_multi *multi, const unsigned int mda_key_id, const bool auth, const char *client_reason); -- cgit