vrr/open5gs
2
0
Fork 0
mirror of https://github.com/open5gs/open5gs.git synced 2026-10-19 09:44:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

sbi: reject expired client certificates in verify_callback

Browse source
This commit is contained in:
Soma Aishwarya 2026-10-16 16:51:42 +05:30 • committed by Sukchan Lee
parent 959c30d51b
commit f125568440
1 changed files with 0 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/sbi/nghttp2-server.c
View file

@ -330,11 +330,6 @@ static int verify_callback(int preverify_ok, X509_STORE_CTX *ctx)
if (!preverify_ok) {
int err = X509_STORE_CTX_get_error(ctx);
int depth = X509_STORE_CTX_get_error_depth(ctx);
if (err == X509_V_ERR_CERT_HAS_EXPIRED && depth == 0) {
ogs_error("The client certificate has expired, but is accepted by "
"configuration");
return 1;
}
ogs_error("client certificate verify error:num=%d:%s:depth=%d",
err, X509_verify_cert_error_string(err), depth);
}