Gitiles
Code Review Sign In
gerrit.openbmc.org / openbmc / phosphor-certificate-manager / 2e8c3a50140b755e9f5c934ca94fb9c5731451b1
commit2e8c3a50140b755e9f5c934ca94fb9c5731451b1[log] [tgz]
authorMarri Devender Rao <devenrao@in.ibm.com>Fri Aug 09 01:26:35 2019 -0500
committerMarri Devender Rao <devenrao@in.ibm.com>Mon Aug 12 05:05:30 2019 -0500
tree4dd27e5d96103a49dba20cc527aa5b73dcacae69
parent7641105d8c6a325d520a8f107a627638298962fc [diff]
Fixed error message logged for certificate verification

Return value of certificate verification failure is validated
for any known errors like certificate not yet valid, self
signed certificate before returning error.

As the message logged before comparing with known errors is
misleading changed the error message and also level of the
log message to INFO.

Tested:
phosphor-certificate-manager[556]: Certificate install
phosphor-certificate-manager[556]: Certificate loadCert
phosphor-certificate-manager[556]: Error occured during X509_verify_cert call,
checking for known error
phosphor-certificate-manager[556]: Certificate compareKeys
phosphor-certificate-manager[556]: Certificate loadCert

"ERROR_STR" : "unable to get local issuer certificate",
"ERRCODE" : "20",

Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Change-Id: I2df9abc766086a9d80063c32ccc8e44b62c48fc1
1 file changed
tree: 4dd27e5d96103a49dba20cc527aa5b73dcacae69
  1. test/
  2. .clang-format
  3. .gitignore
  4. argument.cpp
  5. argument.hpp
  6. bootstrap.sh
  7. certificate.cpp
  8. certificate.hpp
  9. certs_manager.cpp
  10. certs_manager.hpp
  11. configure.ac
  12. csr.cpp
  13. csr.hpp
  14. LICENSE
  15. mainapp.cpp
  16. MAINTAINERS
  17. Makefile.am
  18. README.md
  19. watch.cpp
  20. watch.hpp
README.md

phosphor-certificate-manager

Certificate management allows to replace the existing certificate and private key file with another (possibly CA signed) Certificate key file. Certificate management allows the user to install both the server and client certificates.

To Build

To build this package, do the following steps:

    1. ./bootstrap.sh
    2. ./configure ${CONFIGURE_FLAGS}
    3. make

To clean the repository run `./bootstrap.sh clean`.