lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-12-24 17:41:01 +03:00
Code Activity

- Fixed new logic on certificate chains in x509parse_verify()

Browse Source
This commit is contained in:
Paul Bakker
2009-03-28 20:35:47 +00:00
parent e9581d66b0
commit 7c6d4a4e6b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
library/x509parse.c
View File

@@ -1584,7 +1584,7 @@ int x509parse_verify( x509_cert *crt,
pathlen = 1;
while( cur->version != 0 )
while( cur != NULL && cur->version != 0 )
{
if( cur->ca_istrue == 0 ||
crt->issuer_raw.len != cur->subject_raw.len ||
@@ -1612,7 +1612,7 @@ int x509parse_verify( x509_cert *crt,
/*
* Atempt to validate topmost cert with our CA chain.
*/
while( trust_ca->version != 0 )
while( trust_ca != NULL && trust_ca->version != 0 )
{
if( crt->issuer_raw.len != trust_ca->subject_raw.len ||
memcmp( crt->issuer_raw.p, trust_ca->subject_raw.p,