diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-09-02 20:56:32 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-09-02 22:05:46 +0200 |
| commit | 9dbe3aab9e157ef8f7a67112a4619d4f028519dc (patch) | |
| tree | 6644dbc02a7df02901f83766bf9e46dfd86d8d5a /lib/x509/crl.c | |
| parent | f9372aab943862371d48b6a77b2b0adb2f414a3d (diff) | |
| download | gnutls-9dbe3aab9e157ef8f7a67112a4619d4f028519dc.tar.gz | |
when comparing a CA certificate with the trusted list compare the name and key
That is to handle cases where a CA certificate was superceded by a different
one with the same name and the same key. That can happen when an intermediate
CA certificate is replaced by a self-signed one.
Diffstat (limited to 'lib/x509/crl.c')
| -rw-r--r-- | lib/x509/crl.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/x509/crl.c b/lib/x509/crl.c index 28a5573459..63e20c2ff4 100644 --- a/lib/x509/crl.c +++ b/lib/x509/crl.c @@ -165,7 +165,7 @@ gnutls_x509_crl_import(gnutls_x509_crl_t crl, goto cleanup; } - result = _gnutls_x509_get_raw_dn2(crl->crl, &crl->der, + result = _gnutls_x509_get_raw_field2(crl->crl, &crl->der, "tbsCertList.issuer.rdnSequence", &crl->raw_issuer_dn); if (result < 0) { |