From 2ef4d1a16e95526e2a165c73ff4c2de316a6c2d0 Mon Sep 17 00:00:00 2001
From: Takashi Kojo <kojo@wolfsssl.com>
Date: Thu, 31 Oct 2019 17:29:46 +0900
Subject: [PATCH] Keep else to GetBoolean

---
 wolfcrypt/src/asn.c | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c
index a28651f27..18a4b87de 100644
--- a/wolfcrypt/src/asn.c
+++ b/wolfcrypt/src/asn.c
@@ -7215,13 +7215,10 @@ static int DecodeBasicCaConstraint(const byte* input, int sz, DecodedCert* cert)
     /* If the basic ca constraint is false, this extension may be named, but
      * left empty. So, if the length is 0, just return. */
 
-    if(input[idx] == ASN_BOOLEAN)
-        ret = GetBoolean(input, &idx, sz);
     /* For OpenSSL compatibility, if ASN_INTEGER do nothing */
-    else if (input[idx] == ASN_INTEGER)
+    if (input[idx] == ASN_INTEGER)
         return 0;
-    else
-        ret = ASN_PARSE_E;
+    ret = GetBoolean(input, &idx, sz);
     if (ret < 0) {
         WOLFSSL_MSG("\tfail: constraint not valid BOOLEAN");
         return ret;