AuroraMiddleware/mbedtls
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

- Fixed new logic on certificate chains in x509parse_verify()

Browse Source
This commit is contained in:
Paul Bakker 2009-03-28 20:35:47 +00:00
parent e9581d66b0
commit 7c6d4a4e6b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/x509parse.c
View File

@ -1584,7 +1584,7 @@ int x509parse_verify( x509_cert *crt,
pathlen = 1;
while( cur->version != 0 )
while( cur != NULL && cur->version != 0 )
{
if( cur->ca_istrue == 0 ||
crt->issuer_raw.len != cur->subject_raw.len ||
@ -1612,7 +1612,7 @@ int x509parse_verify( x509_cert *crt,
/*
* Atempt to validate topmost cert with our CA chain.
*/
while( trust_ca->version != 0 )
while( trust_ca != NULL && trust_ca->version != 0 )
{
if( crt->issuer_raw.len != trust_ca->subject_raw.len ||
memcmp( crt->issuer_raw.p, trust_ca->subject_raw.p,