Check the CA bit on trusted CAs too

This commit is contained in:
Manuel Pégourié-Gonnard 2014-04-09 14:08:12 +02:00 committed by Paul Bakker
parent 99d4f19111
commit f93a3c4335

View file

@ -1607,6 +1607,7 @@ static int x509_crt_verify_top(
while( trust_ca != NULL )
{
if( trust_ca->version == 0 ||
trust_ca->ca_istrue == 0 ||
child->issuer_raw.len != trust_ca->subject_raw.len ||
memcmp( child->issuer_raw.p, trust_ca->subject_raw.p,
child->issuer_raw.len ) != 0 )