openssl.x509.verify_param: Bind X509_VERIFY_PARAM_inherit

1 files changed, 31 insertions, 0 deletions

diff --git a/src/openssl.c b/src/openssl.c
index 5e16e56..c5c692f 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -8277,6 +8277,26 @@ static int xp_interpose(lua_State *L) {
 } /* xp_interpose() */
 
 
+static int xp_inherit(lua_State *L) {
+	X509_VERIFY_PARAM *dest = checksimple(L, 1, X509_VERIFY_PARAM_CLASS);
+	X509_VERIFY_PARAM *src = checksimple(L, 2, X509_VERIFY_PARAM_CLASS);
+	int flags = luaL_optinteger(L, 3, 0);
+	unsigned long save_flags = dest->inh_flags;
+	int ret;
+
+	dest->inh_flags |= flags;
+	ret = X509_VERIFY_PARAM_inherit(dest, src);
+	dest->inh_flags = save_flags;
+
+	if (!ret)
+		/* Note: openssl doesn't set an error as it should for some cases */
+		return auxL_error(L, auxL_EOPENSSL, "x509.verify_param:inherit");
+
+	lua_pushboolean(L, 1);
+	return 1;
+} /* xp_inherit() */
+
+
 static const X509_PURPOSE *purpose_checktype(lua_State *L, int index) {
 	const char *purpose_name;
 	int purpose_id;
@@ -8433,6 +8453,7 @@ static int xp__gc(lua_State *L) {
 
 
 static const auxL_Reg xp_methods[] = {
+	{ "inherit", &xp_inherit },
 	{ "setPurpose", &xp_setPurpose },
 	{ "setTime", &xp_setTime },
 	{ "setDepth", &xp_setDepth },
@@ -8459,10 +8480,20 @@ static const auxL_Reg xp_globals[] = {
 	{ NULL, NULL },
 };
 
+static const auxL_IntegerReg xp_inherit_flags[] = {
+	{ "DEFAULT", X509_VP_FLAG_DEFAULT },
+	{ "OVERWRITE", X509_VP_FLAG_OVERWRITE },
+	{ "RESET_FLAGS", X509_VP_FLAG_RESET_FLAGS },
+	{ "LOCKED", X509_VP_FLAG_LOCKED },
+	{ "ONCE", X509_VP_FLAG_ONCE },
+	{ NULL, 0 }
+};
+
 int luaopen__openssl_x509_verify_param(lua_State *L) {
 	initall(L);
 
 	auxL_newlib(L, xp_globals, 0);
+	auxL_setintegers(L, xp_inherit_flags);
 
 	return 1;
 } /* luaopen__openssl_x509_verify_param() */