Delta CRL support in extension code.

diff --git a/CHANGES b/CHANGES
index 41a087f28dbd45b2969f58b551837cf811a5df08..49630ea76e7d1116819a294675582ff7c99b985c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -712,6 +712,9 @@
 
  Changes between 0.9.7d and 0.9.7e  [XX xxx XXXX]
 
 
  Changes between 0.9.7d and 0.9.7e  [XX xxx XXXX]
 

+  *) Add Delta CRL to the extension code.
+     [Steve Henson]
+

   *) Various fixes to s3_pkt.c so alerts are sent properly.
      [David Holmes <d.holmes@f5.com>]
 
   *) Various fixes to s3_pkt.c so alerts are sent properly.
      [David Holmes <d.holmes@f5.com>]
 

diff --git a/crypto/x509v3/ext_dat.h b/crypto/x509v3/ext_dat.h
index bf693698b79e1bd07b76fbb1259c9ed418dc9958..7be85651894b0a2907ccd7eae68f07555599f505 100644 (file)
--- a/crypto/x509v3/ext_dat.h
+++ b/crypto/x509v3/ext_dat.h
@@ -60,7 +60,8 @@
 extern X509V3_EXT_METHOD v3_bcons, v3_nscert, v3_key_usage, v3_ext_ku;
 extern X509V3_EXT_METHOD v3_pkey_usage_period, v3_sxnet, v3_info, v3_sinfo;
 extern X509V3_EXT_METHOD v3_ns_ia5_list[], v3_alt[], v3_skey_id, v3_akey_id;
 extern X509V3_EXT_METHOD v3_bcons, v3_nscert, v3_key_usage, v3_ext_ku;
 extern X509V3_EXT_METHOD v3_pkey_usage_period, v3_sxnet, v3_info, v3_sinfo;
 extern X509V3_EXT_METHOD v3_ns_ia5_list[], v3_alt[], v3_skey_id, v3_akey_id;

-extern X509V3_EXT_METHOD v3_crl_num, v3_crl_reason, v3_crl_invdate, v3_cpols, v3_crld;
+extern X509V3_EXT_METHOD v3_crl_num, v3_crl_reason, v3_crl_invdate;
+extern X509V3_EXT_METHOD v3_delta_crl, v3_cpols, v3_crld;

 extern X509V3_EXT_METHOD v3_ocsp_nonce, v3_ocsp_accresp, v3_ocsp_acutoff;
 extern X509V3_EXT_METHOD v3_ocsp_crlid, v3_ocsp_nocheck, v3_ocsp_serviceloc;
 extern X509V3_EXT_METHOD v3_crl_hold;
 extern X509V3_EXT_METHOD v3_ocsp_nonce, v3_ocsp_accresp, v3_ocsp_acutoff;
 extern X509V3_EXT_METHOD v3_ocsp_crlid, v3_ocsp_nocheck, v3_ocsp_serviceloc;
 extern X509V3_EXT_METHOD v3_crl_hold;


@@ -91,6 +92,7 @@ static X509V3_EXT_METHOD *standard_exts[] = {
 &v3_akey_id,
 &v3_crld,
 &v3_ext_ku,
 &v3_akey_id,
 &v3_crld,
 &v3_ext_ku,

+&v3_delta_crl,

 &v3_crl_reason,
 #ifndef OPENSSL_NO_OCSP
 &v3_crl_invdate,
 &v3_crl_reason,
 #ifndef OPENSSL_NO_OCSP
 &v3_crl_invdate,

diff --git a/crypto/x509v3/v3_int.c b/crypto/x509v3/v3_int.c
index fd6bebbb73c6f757ee8c8e5d598a5b5cab9bc665..85e79c05cad8ca6bafb9728cdc6360f72c303636 100644 (file)
--- a/crypto/x509v3/v3_int.c
+++ b/crypto/x509v3/v3_int.c
@@ -67,6 +67,13 @@ X509V3_EXT_METHOD v3_crl_num = {
        0,
        0,0,0,0, NULL};
 
        0,
        0,0,0,0, NULL};
 

+X509V3_EXT_METHOD v3_delta_crl = { 
+       NID_delta_crl, 0, ASN1_ITEM_ref(ASN1_INTEGER),
+       0,0,0,0,
+       (X509V3_EXT_I2S)i2s_ASN1_INTEGER,
+       0,
+       0,0,0,0, NULL};
+

 static void * s2i_asn1_int(X509V3_EXT_METHOD *meth, X509V3_CTX *ctx, char *value)
        {
        return s2i_ASN1_INTEGER(meth, value);
 static void * s2i_asn1_int(X509V3_EXT_METHOD *meth, X509V3_CTX *ctx, char *value)
        {
        return s2i_ASN1_INTEGER(meth, value);