diff options
| author | Dimitri Staessens <dimitri@ouroboros.rocks> | 2026-07-02 01:06:33 +0200 |
|---|---|---|
| committer | Sander Vrijders <sander@ouroboros.rocks> | 2026-07-08 11:02:23 +0200 |
| commit | 4c836008dcac27e0a8258b07270a8a529b2d9167 (patch) | |
| tree | 5c6580802c62a68f5cfb75859451bce0e6f2cb94 /src/irmd/oap/hdr.h | |
| parent | a16482e4d85394314553c27afcc37c0036b6d506 (diff) | |
| download | ouroboros-4c836008dcac27e0a8258b07270a8a529b2d9167.tar.gz ouroboros-4c836008dcac27e0a8258b07270a8a529b2d9167.zip | |
irmd: Fix OAP re-key header encode
The oap_hdr_encode() function validated its own output by re-decoding
with rekey hardcoded false. The case where the client signs a re-key
failed its own self-check because the cert is not sent again. Now uses
a flag on the encode() to signal the signed re-key without
certificate.
Also fixes a double free after a failed self-decode check.
Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks>
Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
Diffstat (limited to 'src/irmd/oap/hdr.h')
| -rw-r--r-- | src/irmd/oap/hdr.h | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/irmd/oap/hdr.h b/src/irmd/oap/hdr.h index 1a599727..66fbac9a 100644 --- a/src/irmd/oap/hdr.h +++ b/src/irmd/oap/hdr.h @@ -168,13 +168,17 @@ void oap_hdr_init(struct oap_hdr * hdr, void oap_hdr_fini(struct oap_hdr * oap_hdr); +/* oap_hdr_encode option flags */ +#define OAP_ENC_REKEY (1U << 0) /* signed, cert-less re-key packet */ + int oap_hdr_encode(struct oap_hdr * hdr, void * pkp, void * crt, struct sec_config * scfg, buffer_t rsp_tag, int req_md_nid, - const uint8_t * seal_key); + const uint8_t * seal_key, + int flags); int oap_hdr_decode(struct oap_hdr * hdr, buffer_t buf, |