Commit eb6296e8 authored by Benjamin Fry's avatar Benjamin Fry Committed by Bastian Köcher
Browse files

add verify_cert and store_context_builder

parent f645165e

openssl-sys/src/lib.rs

+4 −0
Original line number Diff line number Diff line
@@ -2605,6 +2605,8 @@ extern "C" { 
    pub fn X509_sign(x: *mut X509, pkey: *mut EVP_PKEY, md: *const EVP_MD) -> c_int;

    pub fn X509_get_pubkey(x: *mut X509) -> *mut EVP_PKEY;

    pub fn X509_to_X509_REQ(x: *mut X509, pkey: *mut EVP_PKEY, md: *const EVP_MD) -> *mut X509_REQ;

    #[cfg(not(any(ossl101, libressl)))]

    pub fn X509_verify_cert(ctx: *mut X509_STORE_CTX) -> c_int;

    pub fn X509_verify_cert_error_string(n: c_long) -> *const c_char;

    pub fn X509_get1_ocsp(x: *mut X509) -> *mut stack_st_OPENSSL_STRING;

    pub fn X509_check_issued(issuer: *mut X509, subject: *mut X509) -> c_int;
@@ -2638,6 +2640,8 @@ extern "C" { 
    pub fn X509_STORE_add_cert(store: *mut X509_STORE, x: *mut X509) -> c_int;

    pub fn X509_STORE_set_default_paths(store: *mut X509_STORE) -> c_int;



    pub fn X509_STORE_CTX_new() -> *mut X509_STORE_CTX;

    pub fn X509_STORE_CTX_init(ctx: *mut X509_STORE_CTX, store: *mut X509_STORE, x509: *mut X509, chain: *mut stack_st_X509) -> c_int;

    pub fn X509_STORE_CTX_free(ctx: *mut X509_STORE_CTX);

    pub fn X509_STORE_CTX_get_current_cert(ctx: *mut X509_STORE_CTX) -> *mut X509;

    pub fn X509_STORE_CTX_get_error(ctx: *mut X509_STORE_CTX) -> c_int;

openssl/src/x509/tests.rs

+17 −0
Original line number Diff line number Diff line
@@ -291,3 +291,20 @@ fn clone_x509() { 
    let cert = X509::from_pem(cert).unwrap();

    cert.clone();

}



#[test]

fn test_verify_cert() {

    let cert = include_bytes!("../../test/cert.pem");

    let cert = X509::from_pem(cert).unwrap();

    let ca = include_bytes!("../../test/root-ca.pem");

    let ca = X509::from_pem(ca).unwrap();



    let mut store_bldr = X509StoreBuilder::new().unwrap();

    store_bldr.add_cert(ca);

    let store = store_bldr.build();



    let store_ctx_bldr = X509StoreContext::builder().unwrap();

    let store_ctx = store_ctx_bldr.build(store, cert, Stack::new().unwrap()).unwrap();



    store_ctx.verify_cert().unwrap();

}