fixed checking of unknown critical extensions in openssl_x509

2011-01-31 14:37:48 +01:00
parent ec9f8440f3
commit 8b42864884
1 changed files with 1 additions and 1 deletions
@@ -804,7 +804,7 @@ static bool parse_extensions(private_openssl_x509_t *this)
 					ok = parse_crlDistributionPoints_ext(this, ext);
 					break;
 				default:
-					ok = X509_EXTENSION_get_critical(ext) != 0;
+					ok = X509_EXTENSION_get_critical(ext) == 0;
 					if (!ok)
 					{
 						DBG1(DBG_LIB, "found unsupported critical X.509 extension");