tree 1dad9e7394b7e972ee8259f45025b929cd0d971f
parent 67284cce00147d1e803b51169dfe19c88e86f3ca
author Hanno Becker <hanno.becker@arm.com> 1550749844 +0000
committer Hanno Becker <hanno.becker@arm.com> 1561449986 +0100

Make use of abort condition callback in CN comparison

The previous CN name comparison function x509_crt_verify_name()
traversed the dynamically allocated linked list presentation of
the CRT's subject, comparing each entry to the desired hostname
configured by the application code.

Eventually, we want to get rid of the linked list presentation of
the CRT's subject to save both code and RAM usage, and hence need
to rewrite the CN verification routine in a way that builds on the
raw ASN.1 subject data only.

In order to avoid duplicating the code for the parsing of the nested
ASN.1 name structure, this commit performs the name search by using
the existing name traversal function mbedtls_x509_name_cmp_raw(),
passing to it a callback which checks whether the current name
component matches the desired hostname.