allow up to and including CTC_MAX_SKID_SIZE (32 byte hash)

This commit is contained in:
Jacob Barthelmeh
2022-04-04 15:19:17 -06:00
parent f39bd5e02b
commit 68ebb051e5

View File

@ -44499,7 +44499,7 @@ void* wolfSSL_GetHKDFExtractCtx(WOLFSSL* ssl)
cert->isCA = wolfSSL_X509_get_isCA(x509); cert->isCA = wolfSSL_X509_get_isCA(x509);
#ifdef WOLFSSL_CERT_EXT #ifdef WOLFSSL_CERT_EXT
if (x509->subjKeyIdSz < CTC_MAX_SKID_SIZE) { if (x509->subjKeyIdSz <= CTC_MAX_SKID_SIZE) {
if (x509->subjKeyId) { if (x509->subjKeyId) {
XMEMCPY(cert->skid, x509->subjKeyId, x509->subjKeyIdSz); XMEMCPY(cert->skid, x509->subjKeyId, x509->subjKeyIdSz);
} }