denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openssl: Only allow certificates with cRLSign keyUsage to sign CRLs

Browse Source
This commit is contained in:
Tobias Brunner
2023-03-21 16:34:14 +01:00
parent 7d1f221211
commit 01ec54afc9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_crl.c
+1 -1
View File
@@ -303,7 +303,7 @@ METHOD(certificate_t, issued_by, bool,
return FALSE; return FALSE;
} }
x509 = (x509_t*)issuer; x509 = (x509_t*)issuer;
if (!(x509->get_flags(x509) & (X509_CA | X509_CRL_SIGN))) if (!(x509->get_flags(x509) & X509_CRL_SIGN))
{ {
return FALSE; return FALSE;
} }