From 2d64b4539466e1c52d4cc303712a02dbae03388a Mon Sep 17 00:00:00 2001 From: Johanna Amann Date: Tue, 7 Feb 2017 16:05:47 -0800 Subject: [PATCH] X509: make SCT parsing work with older OpenSSL versions --- src/file_analysis/analyzer/x509/X509.cc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/file_analysis/analyzer/x509/X509.cc b/src/file_analysis/analyzer/x509/X509.cc index e85bc5615d..1189e55eaa 100644 --- a/src/file_analysis/analyzer/x509/X509.cc +++ b/src/file_analysis/analyzer/x509/X509.cc @@ -300,7 +300,11 @@ void file_analysis::X509::ParseExtension(X509_EXTENSION* ex) else if ( OBJ_obj2nid(ext_asn) == NID_subject_alt_name ) ParseSAN(ex); +#ifdef NID_ct_cert_scts else if ( OBJ_obj2nid(ext_asn) == NID_ct_cert_scts || OBJ_obj2nid(ext_asn) == NID_ct_precert_scts ) +#else + else if ( strcmp(oid, "1.3.6.1.4.1.11129.2.4.2") == 0 || strcmp(oid, "1.3.6.1.4.1.11129.2.4.4") == 0 ) +#endif ParseSignedCertificateTimestamps(ex); }