mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-27 05:21:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

Make explicit_policy handling match expected RFC3280 behaviour.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2008-08-02 11:16:35 +00:00
parent 787287af40
commit a9ff742e42
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
crypto/x509v3/pcy_tree.c
View File

@ -130,11 +130,11 @@ static int tree_init(X509_POLICY_TREE **ptree, STACK_OF(X509) *certs,
ret = 2; ret = 2;
if (explicit_policy > 0) if (explicit_policy > 0)
{ {
explicit_policy--; if (!(x->ex_flags & EXFLAG_SI))
if (!(x->ex_flags & EXFLAG_SI) explicit_policy--;
&& (cache->explicit_skip != -1) if ((cache->explicit_skip != -1)
&& (cache->explicit_skip < explicit_policy)) && (cache->explicit_skip < explicit_policy))
explicit_policy = cache->explicit_skip + 1; explicit_policy = cache->explicit_skip;
} }
} }