denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed checking of unknown critical extensions in openssl_x509

Browse Source
This commit is contained in:
Andreas Steffen
2011-01-31 14:37:48 +01:00
parent ec9f8440f3
commit 8b42864884
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_x509.c
+1 -1
View File
@@ -804,7 +804,7 @@ static bool parse_extensions(private_openssl_x509_t *this)
ok = parse_crlDistributionPoints_ext(this, ext); ok = parse_crlDistributionPoints_ext(this, ext);
break; break;
default: default:
ok = X509_EXTENSION_get_critical(ext) != 0; ok = X509_EXTENSION_get_critical(ext) == 0;
if (!ok) if (!ok)
{ {
DBG1(DBG_LIB, "found unsupported critical X.509 extension"); DBG1(DBG_LIB, "found unsupported critical X.509 extension");