- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.
- As a consequence all error code that were positive were changed. A lot of MALLOC_FAILED and FILE_IO_ERROR error codes added for different modules.
- Programs and tests were adapted accordingly
diff --git a/programs/x509/cert_app.c b/programs/x509/cert_app.c
index a041a47..08d1b9a 100644
--- a/programs/x509/cert_app.c
+++ b/programs/x509/cert_app.c
@@ -200,17 +200,25 @@
printf( "\n . Loading the certificate(s) ..." );
fflush( stdout );
- ret = x509parse_crtfile( &crt, opt.filename, opt.permissive );
+ ret = x509parse_crtfile( &crt, opt.filename );
- if( ret != 0 )
+ if( ret < 0 )
{
printf( " failed\n ! x509parse_crt returned %d\n\n", ret );
x509_free( &crt );
goto exit;
}
+ if( opt.permissive == 0 && ret > 0 )
+ {
+ printf( " failed\n ! x509parse_crt failed to parse %d certificates\n\n", ret );
+ x509_free( &crt );
+ goto exit;
+ }
+
printf( " ok\n" );
+
/*
* 1.2 Print the certificate(s)
*/