From f18344c19174e6717431586c53ceb7d2cdec9836 Mon Sep 17 00:00:00 2001
From: David Garske <david@wolfssl.com>
Date: Tue, 20 Jul 2021 15:11:32 -0700
Subject: [PATCH] Fix logic error for calculation of PKCS header size in
 `wolfSSL_i2d_PUBKEY`.

---
 src/ssl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ssl.c b/src/ssl.c
index 5ee5643d5..43721709d 100644
--- a/src/ssl.c
+++ b/src/ssl.c
@@ -8109,7 +8109,7 @@ static int wolfSSL_EVP_PKEY_get_der(const WOLFSSL_EVP_PKEY* key, unsigned char**
     /* return the key without PKCS8 for compatibility */
     /* if pkcs8HeaderSz is invalid, use 0 and return all of pkey */
     pkcs8HeaderSz = 0;
-    if (key->pkey_sz < key->pkcs8HeaderSz)
+    if (key->pkey_sz > key->pkcs8HeaderSz)
         pkcs8HeaderSz = key->pkcs8HeaderSz;
     sz = key->pkey_sz - pkcs8HeaderSz;
     if (der) {