diff options
Diffstat (limited to 'src/pluto/ocsp.c')
-rw-r--r-- | src/pluto/ocsp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/pluto/ocsp.c b/src/pluto/ocsp.c index 8a351be6d..85cc5e0f2 100644 --- a/src/pluto/ocsp.c +++ b/src/pluto/ocsp.c @@ -1046,7 +1046,7 @@ static bool valid_ocsp_response(response_t *res) /* check path length constraint */ pathlen_constraint = x509->get_pathLenConstraint(x509); - if (pathlen_constraint != X509_NO_PATH_LEN_CONSTRAINT && + if (pathlen_constraint != X509_NO_CONSTRAINT && pathlen > pathlen_constraint) { plog("path length of %d violates constraint of %d", |