mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-02-25 00:39:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Return an error on an unsupported SubjectAltName

Browse Source 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
This commit is contained in:
Andrzej Kurek 2023-04-25 02:29:00 -04:00
parent 446e53d401
commit dc22090671
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
library/x509write_crt.c
View File

@ -190,8 +190,8 @@ int mbedtls_x509write_crt_set_subject_alternative_name(mbedtls_x509write_cert *c
break; break;
} }
default: default:
/* Not supported - skip. */ /* Not supported - return. */
break; return MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE;
} }
} }
@ -249,8 +249,9 @@ int mbedtls_x509write_crt_set_subject_alternative_name(mbedtls_x509write_cert *c
MBEDTLS_X509_SAN_DIRECTORY_NAME)); MBEDTLS_X509_SAN_DIRECTORY_NAME));
break; break;
default: default:
/* Skip unsupported names. */ /* Error out on an unsupported SAN */
break; ret = MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE;
goto cleanup;
} }
cur = cur->next; cur = cur->next;
len += single_san_len; len += single_san_len;