From 71f71074f86b7eb3462c616fce02855ddeef05bd Mon Sep 17 00:00:00 2001 From: JacobBarthelmeh Date: Tue, 25 Apr 2023 13:32:19 -0700 Subject: [PATCH] revert WOLFSSL_NO_ASN_STRICT macro guard --- wolfcrypt/src/asn.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c index dfe9817a7..e84a4a9ac 100644 --- a/wolfcrypt/src/asn.c +++ b/wolfcrypt/src/asn.c @@ -16555,9 +16555,10 @@ static int ConfirmNameConstraints(Signer* signer, DecodedCert* cert) } break; case ASN_DIR_TYPE: - name = cert->altDirNames; - #ifndef WOLFSSL_NO_ASN_STRICT + name = cert->altDirNames; + #endif + /* RFC 5280 section 4.2.1.10 "Restrictions of the form directoryName MUST be applied to the subject field .... and to any names @@ -16570,7 +16571,6 @@ static int ConfirmNameConstraints(Signer* signer, DecodedCert* cert) subjectDnsName.len = cert->subjectRawLen; subjectDnsName.name = (char *)cert->subjectRaw; } - #endif break; default: /* Other types of names are ignored for now.