From 5dba5852fcaa965cfc0adb0c2a756814af2c1885 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Wed, 15 Dec 2010 16:42:30 +0100 Subject: Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too --- src/libstrongswan/plugins/constraints/constraints_validator.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/libstrongswan/plugins/constraints/constraints_validator.c') diff --git a/src/libstrongswan/plugins/constraints/constraints_validator.c b/src/libstrongswan/plugins/constraints/constraints_validator.c index bab2535c1..a52f37a1c 100644 --- a/src/libstrongswan/plugins/constraints/constraints_validator.c +++ b/src/libstrongswan/plugins/constraints/constraints_validator.c @@ -39,7 +39,7 @@ static bool check_pathlen(x509_t *issuer, int pathlen) int pathlen_constraint; pathlen_constraint = issuer->get_pathLenConstraint(issuer); - if (pathlen_constraint != X509_NO_PATH_LEN_CONSTRAINT && + if (pathlen_constraint != X509_NO_CONSTRAINT && pathlen > pathlen_constraint) { DBG1(DBG_CFG, "path length of %d violates constraint of %d", -- cgit v1.2.3