min
/
boring2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add support for X509_STORE_CTX_get0_untrusted

This commit is contained in:
James Larisch 2025-05-28 15:40:15 -04:00 committed by Kornel
parent e99d162891
commit 2bc82e8d1c
2 changed files with 42 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
boring/src/ssl/test/cert_verify.rs
View File

@ -72,13 +72,34 @@ fn callback_receives_correct_certificate() {
assert!(x509.cert().is_some());
assert!(x509.verify_result().is_err());
let root = x509.current_cert().unwrap();
let digest = root.digest(MessageDigest::sha1()).unwrap();
assert_eq!(hex::encode(digest), root_sha1);
let root = x509
.current_cert()
.unwrap()
.digest(MessageDigest::sha1())
.unwrap();
assert_eq!(hex::encode(root), root_sha1);
let leaf = x509.cert().unwrap();
let digest = leaf.digest(MessageDigest::sha1()).unwrap();
assert_eq!(hex::encode(digest), leaf_sha1);
let leaf = x509.cert().unwrap().digest(MessageDigest::sha1()).unwrap();
assert_eq!(hex::encode(leaf), leaf_sha1);
// Test that `untrusted` is set to the original chain.
assert_eq!(x509.untrusted().unwrap().len(), 2);
let leaf = x509
.untrusted()
.unwrap()
.get(0)
.unwrap()
.digest(MessageDigest::sha1())
.unwrap();
assert_eq!(hex::encode(leaf), leaf_sha1);
let root = x509
.untrusted()
.unwrap()
.get(1)
.unwrap()
.digest(MessageDigest::sha1())
.unwrap();
assert_eq!(hex::encode(root), root_sha1);
true
});

15
boring/src/x509/mod.rs
View File

@ -216,6 +216,21 @@ impl X509StoreContextRef {
}
}
/// Returns a reference to the `X509` certificates used to initialize the
/// [`X509StoreContextRef`].
#[corresponds(X509_STORE_CTX_get0_untrusted)]
pub fn untrusted(&self) -> Option<&StackRef<X509>> {
unsafe {
let certs = ffi::X509_STORE_CTX_get0_untrusted(self.as_ptr());
if certs.is_null() {
None
} else {
Some(StackRef::from_ptr(certs))
}
}
}
/// Returns a reference to the certificate being verified.
/// May return None if a raw public key is being verified.
#[corresponds(X509_STORE_CTX_get0_cert)]