RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-31 09:38:11 +00:00
Code Issues Activity Actions

LibTLS: Verify server certificate expiry date

Browse source
This commit is contained in:
AnotherTest 2020-05-06 21:43:27 +04:30 • committed by Andreas Kling
parent d051fffe25
commit af1ce6c33d
3 changed files with 142 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

15
Libraries/LibTLS/ClientHandshake.cpp
View file

@ -363,6 +363,21 @@ ssize_t TLSv12::handle_payload(const ByteBuffer& vbuffer)
ASSERT_NOT_REACHED();
}
payload_res = handle_certificate(buffer.slice_view(1, payload_size));
if (m_context.certificates.size()) {
auto it = m_context.certificates.find([&](auto& cert) { return cert.is_valid(); });
if (it.is_end()) {
// no valid certificates
dbg() << "No valid certificates found";
payload_res = (i8)Error::BadCertificate;
m_context.critical_error = payload_res;
break;
}
// swap the first certificate with the valid one
if (it.index() != 0)
swap(m_context.certificates[0], m_context.certificates[it.index()]);
}
} else {
payload_res = (i8)Error::UnexpectedMessage;
}