auth-cfg: Don't limit subjectAltName check to received certificates

Otherwise this won't work if the certificate is only locally available.
This commit is contained in:
Tobias Brunner
2017-07-27 13:27:19 +02:00
parent 4272a3e9d7
commit 0b756fbe95
+1 -1
View File
@@ -840,7 +840,7 @@ METHOD(auth_cfg_t, complies, bool,
{ /* also verify identity against subjectAltNames */
certificate_t *cert;
cert = get(this, AUTH_HELPER_SUBJECT_CERT);
cert = get(this, AUTH_RULE_SUBJECT_CERT);
if (cert && cert->has_subject(cert, id1))
{
break;