denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth-cfg: Don't limit subjectAltName check to received certificates

Browse Source 
Otherwise this won't work if the certificate is only locally available.
This commit is contained in:
Tobias Brunner
2017-07-27 13:27:19 +02:00
parent 4272a3e9d7
commit 0b756fbe95
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/credentials/auth_cfg.c
+1 -1
View File
@@ -840,7 +840,7 @@ METHOD(auth_cfg_t, complies, bool,
{ /* also verify identity against subjectAltNames */ { /* also verify identity against subjectAltNames */
certificate_t *cert; certificate_t *cert;
cert = get(this, AUTH_HELPER_SUBJECT_CERT); cert = get(this, AUTH_RULE_SUBJECT_CERT);
if (cert && cert->has_subject(cert, id1)) if (cert && cert->has_subject(cert, id1))
{ {
break; break;