Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
This commit is contained in:
+1
-1
@@ -1046,7 +1046,7 @@ static bool valid_ocsp_response(response_t *res)
|
||||
|
||||
/* check path length constraint */
|
||||
pathlen_constraint = x509->get_pathLenConstraint(x509);
|
||||
if (pathlen_constraint != X509_NO_PATH_LEN_CONSTRAINT &&
|
||||
if (pathlen_constraint != X509_NO_CONSTRAINT &&
|
||||
pathlen > pathlen_constraint)
|
||||
{
|
||||
plog("path length of %d violates constraint of %d",
|
||||
|
||||
+2
-2
@@ -256,7 +256,7 @@ bool verify_x509cert(cert_t *cert, bool strict, time_t *until)
|
||||
|
||||
/* check path length constraint */
|
||||
pathlen_constraint = x509->get_pathLenConstraint(x509);
|
||||
if (pathlen_constraint != X509_NO_PATH_LEN_CONSTRAINT &&
|
||||
if (pathlen_constraint != X509_NO_CONSTRAINT &&
|
||||
pathlen > pathlen_constraint)
|
||||
{
|
||||
plog("path length of %d violates constraint of %d",
|
||||
@@ -451,7 +451,7 @@ void list_x509cert_chain(const char *caption, cert_t* cert,
|
||||
|
||||
/* list optional pathLenConstraint */
|
||||
pathlen = x509->get_pathLenConstraint(x509);
|
||||
if (pathlen != X509_NO_PATH_LEN_CONSTRAINT)
|
||||
if (pathlen != X509_NO_CONSTRAINT)
|
||||
{
|
||||
whack_log(RC_COMMENT, " pathlen: %d", pathlen);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user