CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation

2011-01-05 16:45:56 +01:00
parent ece5ac2271
commit dffb176f2b
2 changed files with 3 additions and 3 deletions
@@ -388,7 +388,7 @@ METHOD(certificate_t, issued_by, bool,
 	{
 		return FALSE;
 	}
-	if (!(x509->get_flags(x509) & X509_CA))
+	if (!(x509->get_flags(x509) & (X509_CA | X509_CRL_SIGN)))
 	{
 		return FALSE;
 	}