parse out extension. One event for general extensions (just returns the

openssl-parsed string-value), one event for basicconstraints (is a certificate
a CA or not) and one event for subject-alternative-names (only DNS parts).
This commit is contained in:
Bernhard Amann 2013-09-19 14:35:11 -07:00
parent e5a589dbfe
commit df552ca87d
9 changed files with 202 additions and 33 deletions

View file

@ -7,6 +7,7 @@
#include "../File.h"
#include "Analyzer.h"
#include <openssl/x509.h>
#include <openssl/asn1.h>
namespace file_analysis {
@ -30,6 +31,11 @@ private:
static StringVal* key_curve(EVP_PKEY *key);
static unsigned int key_length(EVP_PKEY *key);
void ParseCertificate(::X509* ssl_cert);
void ParseExtension(X509_EXTENSION* ex);
void ParseBasicConstraints(X509_EXTENSION* ex);
void ParseSAN(X509_EXTENSION* ex);
std::string cert_data;
};