libaacs | branch: master | npzacs <[email protected]> | Mon May 7 11:35:30 2012 +0300| [765a35d084c5800cbed52cb127527ec267e8c031] | committer: npzacs
Check host certificates against latest seen revocation list > http://git.videolan.org/gitweb.cgi/libaacs.git/?a=commit;h=765a35d084c5800cbed52cb127527ec267e8c031 --- ChangeLog | 1 + src/libaacs/aacs.c | 7 +++++++ 2 files changed, 8 insertions(+), 0 deletions(-) diff --git a/ChangeLog b/ChangeLog index b88a2e9..cdc8d65 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,6 +5,7 @@ - Fixed memory leaks - Fixed buffer overflow - Added revocation list caching + - Check host certificates against latest seen revocation list 2012-03-21: Version 0.3.1 - Added configure option for libgcrypt prefix diff --git a/src/libaacs/aacs.c b/src/libaacs/aacs.c index 5f25226..f702fec 100644 --- a/src/libaacs/aacs.c +++ b/src/libaacs/aacs.c @@ -289,6 +289,13 @@ static int _read_vid(AACS *aacs, cert_list *hcl) continue; } + if (mkb_host_cert_is_revoked(hrl_mkb, cert + 4)) { + DEBUG(DBG_AACS | DBG_CRIT, "Host certificate %s has been revoked.\n", + print_hex(tmp_str, cert + 4, 6)); + error_code = AACS_ERROR_CERT_REVOKED; + //continue; + } + DEBUG(DBG_AACS, "Trying host certificate (id 0x%s)...\n", print_hex(tmp_str, cert + 4, 6)); _______________________________________________ libaacs-devel mailing list [email protected] http://mailman.videolan.org/listinfo/libaacs-devel
