cert.c (imapfilter-2.7.5) | : | cert.c (imapfilter-2.7.6) | ||
---|---|---|---|---|
skipping to change at line 37 | skipping to change at line 37 | |||
int | int | |||
get_cert(session *ssn) | get_cert(session *ssn) | |||
{ | { | |||
X509 *cert; | X509 *cert; | |||
unsigned char md[EVP_MAX_MD_SIZE]; | unsigned char md[EVP_MAX_MD_SIZE]; | |||
unsigned int mdlen; | unsigned int mdlen; | |||
long verify; | long verify; | |||
mdlen = 0; | mdlen = 0; | |||
#if OPENSSL_VERSION_NUMBER >= 0x30000000L | ||||
if (!(cert = SSL_get1_peer_certificate(ssn->sslconn))) | ||||
#else | ||||
if (!(cert = SSL_get_peer_certificate(ssn->sslconn))) | if (!(cert = SSL_get_peer_certificate(ssn->sslconn))) | |||
#endif | ||||
return -1; | return -1; | |||
verify = SSL_get_verify_result(ssn->sslconn); | verify = SSL_get_verify_result(ssn->sslconn); | |||
if (!((verify == X509_V_OK) || | if (!((verify == X509_V_OK) || | |||
(verify == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) || | (verify == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) || | |||
(verify == X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY))) { | (verify == X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY))) { | |||
error("certificate verification failed; %s\n", | error("certificate verification failed; %s\n", | |||
X509_verify_cert_error_string(verify)); | X509_verify_cert_error_string(verify)); | |||
goto fail; | goto fail; | |||
} | } | |||
End of changes. 2 change blocks. | ||||
0 lines changed or deleted | 4 lines changed or added |