aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/plugins/openssl/openssl_x509.c
diff options
context:
space:
mode:
authorAndreas Steffen <andreas.steffen@strongswan.org>2011-01-31 14:37:48 +0100
committerAndreas Steffen <andreas.steffen@strongswan.org>2011-01-31 14:37:48 +0100
commit8b428648840a84674dafa7e849ec6ace9777f676 (patch)
tree14189de22f960fab0b31a26d1b19e18364797529 /src/libstrongswan/plugins/openssl/openssl_x509.c
parentec9f8440f3b0206d6c73f4c6f6cb9508b77ba93f (diff)
downloadstrongswan-8b428648840a84674dafa7e849ec6ace9777f676.tar.bz2
strongswan-8b428648840a84674dafa7e849ec6ace9777f676.tar.xz
fixed checking of unknown critical extensions in openssl_x509
Diffstat (limited to 'src/libstrongswan/plugins/openssl/openssl_x509.c')
-rw-r--r--src/libstrongswan/plugins/openssl/openssl_x509.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libstrongswan/plugins/openssl/openssl_x509.c b/src/libstrongswan/plugins/openssl/openssl_x509.c
index dfbebe746..ddc9d5b6e 100644
--- a/src/libstrongswan/plugins/openssl/openssl_x509.c
+++ b/src/libstrongswan/plugins/openssl/openssl_x509.c
@@ -804,7 +804,7 @@ static bool parse_extensions(private_openssl_x509_t *this)
ok = parse_crlDistributionPoints_ext(this, ext);
break;
default:
- ok = X509_EXTENSION_get_critical(ext) != 0;
+ ok = X509_EXTENSION_get_critical(ext) == 0;
if (!ok)
{
DBG1(DBG_LIB, "found unsupported critical X.509 extension");