diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-03 13:51:51 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:45:56 +0100 |
| commit | dffb176f2bc09ec1323f60a04f342391a3ab6dad (patch) | |
| tree | f7453d076281c59f4bc940ebc953a24314019878 /src/libstrongswan/plugins/x509/x509_crl.c | |
| parent | ece5ac2271fcf57da630ce65e27121aec36063b4 (diff) | |
| download | strongswan-dffb176f2bc09ec1323f60a04f342391a3ab6dad.tar.bz2 strongswan-dffb176f2bc09ec1323f60a04f342391a3ab6dad.tar.xz | |
CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation
Diffstat (limited to 'src/libstrongswan/plugins/x509/x509_crl.c')
| -rw-r--r-- | src/libstrongswan/plugins/x509/x509_crl.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libstrongswan/plugins/x509/x509_crl.c b/src/libstrongswan/plugins/x509/x509_crl.c index 4bd0470d3..9a0010299 100644 --- a/src/libstrongswan/plugins/x509/x509_crl.c +++ b/src/libstrongswan/plugins/x509/x509_crl.c @@ -388,7 +388,7 @@ METHOD(certificate_t, issued_by, bool, { return FALSE; } - if (!(x509->get_flags(x509) & X509_CA)) + if (!(x509->get_flags(x509) & (X509_CA | X509_CRL_SIGN))) { return FALSE; } |