diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-12-20 18:48:24 -0600 |
|---|---|---|
| committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-12-20 18:48:24 -0600 |
| commit | 9543a33eb63564c3fe04efbc451b2f6c742be4fe (patch) | |
| tree | b05051c55e2639127b3ab22041bc22a342f9cbe4 /src | |
| parent | fc504fee938a5223e790e4c221c20177bca6aa14 (diff) | |
| download | cryptography-9543a33eb63564c3fe04efbc451b2f6c742be4fe.tar.gz cryptography-9543a33eb63564c3fe04efbc451b2f6c742be4fe.tar.bz2 cryptography-9543a33eb63564c3fe04efbc451b2f6c742be4fe.zip | |
support CRLs with no revoked certificates
Diffstat (limited to 'src')
| -rw-r--r-- | src/cryptography/hazmat/backends/openssl/x509.py | 13 |
1 files changed, 6 insertions, 7 deletions
diff --git a/src/cryptography/hazmat/backends/openssl/x509.py b/src/cryptography/hazmat/backends/openssl/x509.py index 4e91bf43..f50a0d5d 100644 --- a/src/cryptography/hazmat/backends/openssl/x509.py +++ b/src/cryptography/hazmat/backends/openssl/x509.py @@ -835,14 +835,13 @@ class _CertificateRevocationList(object): def _revoked_certificates(self): revoked = self._backend._lib.X509_CRL_get_REVOKED(self._x509_crl) - self._backend.openssl_assert(revoked != self._backend._ffi.NULL) - - num = self._backend._lib.sk_X509_REVOKED_num(revoked) revoked_list = [] - for i in range(num): - r = self._backend._lib.sk_X509_REVOKED_value(revoked, i) - self._backend.openssl_assert(r != self._backend._ffi.NULL) - revoked_list.append(_RevokedCertificate(self._backend, r)) + if revoked != self._backend._ffi.NULL: + num = self._backend._lib.sk_X509_REVOKED_num(revoked) + for i in range(num): + r = self._backend._lib.sk_X509_REVOKED_value(revoked, i) + self._backend.openssl_assert(r != self._backend._ffi.NULL) + revoked_list.append(_RevokedCertificate(self._backend, r)) return revoked_list |