]> git.proxmox.com Git - mirror_edk2.git/commit - CryptoPkg/Include/Library/BaseCryptLib.h
CryptoPkg: Add new API to retrieve commonName of X.509 certificate
authorQin Long <qin.long@intel.com>
Sun, 24 Sep 2017 15:42:16 +0000 (23:42 +0800)
committerQin Long <qin.long@intel.com>
Sun, 24 Sep 2017 16:06:41 +0000 (00:06 +0800)
commit5b7c22450591a9e20ff54b970c11087ccfff563d
tree8b6859c395ecbc4f3aa208692915f95d8847d528
parentfc8be1ad9ab310b1c7752985c982b66a5a377f1a
CryptoPkg: Add new API to retrieve commonName of X.509 certificate

v3: Add extra CommonNameSize check since OpenSSL didn't check this
    input parameter. (One openssl issue was filed to address this risk:
    https://github.com/openssl/openssl/issues/4392)
v2: Update function interface to return RETURN_STATUS to represent
    different error cases.

Add one new API (X509GetCommonName()) to retrieve the subject commonName
string from one X.509 certificate.

Cc: Laszlo Ersek <lersek@redhat.com>
Cc: Ting Ye <ting.ye@intel.com>
Cc: Chao Zhang <chao.b.zhang@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Qin Long <qin.long@intel.com>
Reviewed-by: Ye Ting <ting.ye@intel.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>
CryptoPkg/Application/Cryptest/RsaVerify2.c
CryptoPkg/Include/Library/BaseCryptLib.h
CryptoPkg/Library/BaseCryptLib/Pk/CryptX509.c
CryptoPkg/Library/BaseCryptLib/Pk/CryptX509Null.c
CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptX509Null.c