summaryrefslogtreecommitdiff
path: root/src/lib/config.h
diff options
context:
space:
mode:
authorCarl Hetherington <cth@carlh.net>2024-01-08 19:01:21 +0100
committerCarl Hetherington <cth@carlh.net>2024-01-09 11:54:17 +0100
commit69a84c50d0e1196c3a83883173e4a301ff550364 (patch)
tree2d9342d791e46d04223f5ed589114f637ab077cf /src/lib/config.h
parent12d1abf033654727d6ab6278087ff7cfc65d63f6 (diff)
Check for bad DN qualifiers on signer certificates (#2716).
Diffstat (limited to 'src/lib/config.h')
-rw-r--r--src/lib/config.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/lib/config.h b/src/lib/config.h
index 0a332bcbb..dce4aafef 100644
--- a/src/lib/config.h
+++ b/src/lib/config.h
@@ -430,6 +430,7 @@ public:
NAG_32_ON_64,
NAG_TOO_MANY_DROPPED_FRAMES,
NAG_BAD_SIGNER_CHAIN_VALIDITY,
+ NAG_BAD_SIGNER_DN_QUALIFIER,
NAG_COUNT
};
@@ -1224,6 +1225,7 @@ public:
BAD_SIGNER_INCONSISTENT, ///< signer chain is somehow inconsistent
BAD_DECRYPTION_INCONSISTENT, ///< KDM decryption chain is somehow inconsistent
BAD_SIGNER_VALIDITY_TOO_LONG, ///< signer certificate validity periods are >10 years
+ BAD_SIGNER_DN_QUALIFIER, ///< some signer certificate has a bad dnQualifier (DoM #2716).
};
static boost::signals2::signal<bool (BadReason)> Bad;