Make it possible for external code to set the certiciate proxy path length
authorRichard Levitte <levitte@openssl.org>
Mon, 25 Jul 2016 15:02:56 +0000 (17:02 +0200)
committerRichard Levitte <levitte@openssl.org>
Mon, 25 Jul 2016 15:36:39 +0000 (17:36 +0200)
commitfe0169b09717b3c3d52c0fba96e1dcf5e8a60d94
treee18b998d2adf160cfdb25312dcb89b0ead1b0075
parent3067095e8a2cca3d33fa0af77788bc45da68b76b
Make it possible for external code to set the certiciate proxy path length

This adds the functions X509_set_proxy_pathlen(), which sets the
internal pc path length cache for a given X509 structure, along with
X509_get_proxy_pathlen(), which retrieves it.

Along with the previously added X509_set_proxy_flag(), this provides
the tools needed to manipulate all the information cached on proxy
certificates, allowing external code to do what's necessary to have
them verified correctly by the libcrypto code.

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509v3/v3_purp.c
doc/crypto/X509_get_extension_flags.pod
include/openssl/x509v3.h
util/libcrypto.num