diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-15 16:42:30 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:46:02 +0100 |
| commit | 5dba5852fcaa965cfc0adb0c2a756814af2c1885 (patch) | |
| tree | 50de01ff770a68b75e00a00f867c532024bfa887 /src/pluto/x509.c | |
| parent | 3ffc9d9a881675df1f8403db625860fad328efd0 (diff) | |
| download | strongswan-5dba5852fcaa965cfc0adb0c2a756814af2c1885.tar.bz2 strongswan-5dba5852fcaa965cfc0adb0c2a756814af2c1885.tar.xz | |
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
Diffstat (limited to 'src/pluto/x509.c')
| -rw-r--r-- | src/pluto/x509.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/pluto/x509.c b/src/pluto/x509.c index d717beb15..d821c9b79 100644 --- a/src/pluto/x509.c +++ b/src/pluto/x509.c @@ -256,7 +256,7 @@ bool verify_x509cert(cert_t *cert, bool strict, time_t *until) /* check path length constraint */ pathlen_constraint = x509->get_pathLenConstraint(x509); - if (pathlen_constraint != X509_NO_PATH_LEN_CONSTRAINT && + if (pathlen_constraint != X509_NO_CONSTRAINT && pathlen > pathlen_constraint) { plog("path length of %d violates constraint of %d", @@ -451,7 +451,7 @@ void list_x509cert_chain(const char *caption, cert_t* cert, /* list optional pathLenConstraint */ pathlen = x509->get_pathLenConstraint(x509); - if (pathlen != X509_NO_PATH_LEN_CONSTRAINT) + if (pathlen != X509_NO_CONSTRAINT) { whack_log(RC_COMMENT, " pathlen: %d", pathlen); } |