mirror of
https://github.com/yuzu-emu/mbedtls
synced 2024-11-25 02:28:11 +00:00
- Fixed new logic on certificate chains in x509parse_verify()
This commit is contained in:
parent
e9581d66b0
commit
7c6d4a4e6b
1 changed files with 2 additions and 2 deletions
|
@ -1584,7 +1584,7 @@ int x509parse_verify( x509_cert *crt,
|
||||||
|
|
||||||
pathlen = 1;
|
pathlen = 1;
|
||||||
|
|
||||||
while( cur->version != 0 )
|
while( cur != NULL && cur->version != 0 )
|
||||||
{
|
{
|
||||||
if( cur->ca_istrue == 0 ||
|
if( cur->ca_istrue == 0 ||
|
||||||
crt->issuer_raw.len != cur->subject_raw.len ||
|
crt->issuer_raw.len != cur->subject_raw.len ||
|
||||||
|
@ -1612,7 +1612,7 @@ int x509parse_verify( x509_cert *crt,
|
||||||
/*
|
/*
|
||||||
* Atempt to validate topmost cert with our CA chain.
|
* Atempt to validate topmost cert with our CA chain.
|
||||||
*/
|
*/
|
||||||
while( trust_ca->version != 0 )
|
while( trust_ca != NULL && trust_ca->version != 0 )
|
||||||
{
|
{
|
||||||
if( crt->issuer_raw.len != trust_ca->subject_raw.len ||
|
if( crt->issuer_raw.len != trust_ca->subject_raw.len ||
|
||||||
memcmp( crt->issuer_raw.p, trust_ca->subject_raw.p,
|
memcmp( crt->issuer_raw.p, trust_ca->subject_raw.p,
|
||||||
|
|
Loading…
Reference in a new issue