commit 6c0ceb3f9aacdabeb475acdeae741685bb9d46bb
author Paul Bakker <p.j.bakker@polarssl.org> Sun Dec 04 12:24:18 2011 +0000
committer Paul Bakker <p.j.bakker@polarssl.org> Sun Dec 04 12:24:18 2011 +0000
tree 3225512c927b0e73ac28b4abca7e8c064e5a7be6
parent a17bcc3033e5193213b05a9c713829689c9f7692

 -  Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index a865a75..26e7dfa 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1401,7 +1401,8 @@
             return( POLARSSL_ERR_SSL_BAD_HS_CERTIFICATE );
         }
 
-        ret = x509parse_crt( ssl->peer_cert, ssl->in_msg + i, n );
+        ret = x509parse_crt( ssl->peer_cert, ssl->in_msg + i, n,
+                             X509_NON_PERMISSIVE );
         if( ret != 0 )
         {
             SSL_DEBUG_RET( 1, " x509parse_crt", ret );