forked from wolfSSL/wolfssl
Edge case fix for AKID not set in CA and two CAs with same issuer line
This commit is contained in:
@ -8079,6 +8079,8 @@ int ParseCertRelative(DecodedCert* cert, int type, int verify, void* cm)
|
|||||||
#ifndef NO_SKID
|
#ifndef NO_SKID
|
||||||
if (cert->extAuthKeyIdSet)
|
if (cert->extAuthKeyIdSet)
|
||||||
cert->ca = GetCA(cm, cert->extAuthKeyId);
|
cert->ca = GetCA(cm, cert->extAuthKeyId);
|
||||||
|
if (cert->ca == NULL)
|
||||||
|
cert->ca = GetCA(cm, cert->extSubjKeyId);
|
||||||
if (cert->ca == NULL)
|
if (cert->ca == NULL)
|
||||||
cert->ca = GetCAByName(cm, cert->issuerHash);
|
cert->ca = GetCAByName(cm, cert->issuerHash);
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user