revocation: Set defaults if CRL/OCSP checking is disabled in config

This commit is contained in:
Tobias Brunner 2018-05-03 11:19:18 +02:00
parent b00d3adbd1
commit cae43b890a
1 changed files with 9 additions and 0 deletions

View File

@ -824,6 +824,10 @@ METHOD(cert_validator_t, validate, bool,
break;
}
}
else
{
auth->add(auth, AUTH_RULE_OCSP_VALIDATION, VALIDATION_SKIPPED);
}
if (this->enable_crl)
{
@ -847,6 +851,11 @@ METHOD(cert_validator_t, validate, bool,
break;
}
}
else
{
auth->add(auth, AUTH_RULE_CRL_VALIDATION,
auth->get(auth, AUTH_RULE_OCSP_VALIDATION));
}
lib->credmgr->call_hook(lib->credmgr, CRED_HOOK_VALIDATION_FAILED,
subject);