| commit | f93a3c433560f59885cc81800b8b0f6c7c4c69c2 | [log] [tgz] |
|---|---|---|
| author | Manuel Pégourié-Gonnard <mpg@elzevir.fr> | Wed Apr 09 14:08:12 2014 +0200 |
| committer | Paul Bakker <p.j.bakker@polarssl.org> | Wed Apr 09 15:50:58 2014 +0200 |
| tree | b144090363fe6b9aeb82d96ea9e0c806b560e217 | |
| parent | 99d4f1911173d75092cbde580f531639d92bfd9b [diff] [blame] |
Check the CA bit on trusted CAs too
diff --git a/library/x509_crt.c b/library/x509_crt.c index 47745a7..94d8552 100644 --- a/library/x509_crt.c +++ b/library/x509_crt.c
@@ -1607,6 +1607,7 @@ while( trust_ca != NULL ) { if( trust_ca->version == 0 || + trust_ca->ca_istrue == 0 || child->issuer_raw.len != trust_ca->subject_raw.len || memcmp( child->issuer_raw.p, trust_ca->subject_raw.p, child->issuer_raw.len ) != 0 )