commit 4e021c8f50f12fcb8c8924d25aaecff905f907b0
author Hanno Becker <hanno.becker@arm.com> Mon Mar 04 13:53:10 2019 +0000
committer Hanno Becker <hanno.becker@arm.com> Tue Jun 25 09:07:16 2019 +0100
tree 685bafa615a167ba8cd1463b6a2e51cddee05e5d
parent ea32d8ba2adbffc1a16a5fc0b920f97ec62e263c

Remove raw SubjectAltNames and ExtKeyUsage from legacy CRT struct

include/mbedtls/x509_crt.h

diff --git a/include/mbedtls/x509_crt.h b/include/mbedtls/x509_crt.h
index ad6140c..4335ab3 100644
--- a/include/mbedtls/x509_crt.h
+++ b/include/mbedtls/x509_crt.h
@@ -155,7 +155,6 @@
     mbedtls_x509_buf subject_id;        /**< Optional X.509 v2/v3 subject unique identifier. */
     mbedtls_x509_buf v3_ext;            /**< Optional X.509 v3 extensions.  */
     mbedtls_x509_sequence subject_alt_names;    /**< Optional list of Subject Alternative Names (Only dNSName supported). */
-    mbedtls_x509_buf_raw subject_alt_raw; /**< Raw data for SubjectAlternativeNames extension. */
 
     int ext_types;              /**< Bit string containing detected and parsed extensions */
     int ca_istrue;              /**< Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise. */
@@ -164,7 +163,6 @@
     unsigned int key_usage;     /**< Optional key usage extension value: See the values in x509.h */
 
     mbedtls_x509_sequence ext_key_usage;    /**< Optional list of extended key usage OIDs. */
-    mbedtls_x509_buf_raw ext_key_usage_raw; /**< Raw data of ExtendedKeyUsage extensions.  */
 
     unsigned char ns_cert_type; /**< Optional Netscape certificate type extension value: See the values in x509.h */
 

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index bb064d6..fb5265a 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -136,8 +136,6 @@
     frame->sig.len = crt->sig.len;
     frame->v3_ext.p   = crt->v3_ext.p;
     frame->v3_ext.len = crt->v3_ext.len;
-    frame->subject_alt_raw = crt->subject_alt_raw;
-    frame->ext_key_usage_raw = crt->ext_key_usage_raw;
     frame->issuer_raw_with_hdr.p   = crt->issuer_raw.p;
     frame->issuer_raw_with_hdr.len = crt->issuer_raw.len;
     frame->subject_raw_with_hdr.p   = crt->subject_raw.p;
@@ -1467,8 +1465,6 @@
     crt->subject_id.len = frame->subject_id.len;
     crt->pk_raw.p   = frame->pubkey_raw.p;
     crt->pk_raw.len = frame->pubkey_raw.len;
-    crt->ext_key_usage_raw = frame->ext_key_usage_raw;
-    crt->subject_alt_raw = frame->subject_alt_raw;
     crt->sig.p   = frame->sig.p;
     crt->sig.len = frame->sig.len;
     crt->valid_from = frame->valid_from;