From 09274ca3dcc49e3d463aefceb5ccb72f4fc8e1ee Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Wed, 24 Mar 2021 15:56:57 -0500
Subject: [PATCH] hx509: Finish any-EKU support

---
 lib/hx509/cert.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/lib/hx509/cert.c b/lib/hx509/cert.c
index 3fc30fcc8..f9907ea7d 100644
--- a/lib/hx509/cert.c
+++ b/lib/hx509/cert.c
@@ -3490,12 +3490,11 @@ hx509_cert_check_eku(hx509_context context, hx509_cert cert,
 	    return 0;
 	}
 	if (allow_any_eku) {
-#if 0
-	    if (der_heim_oid_cmp(id_any_eku, &e.val[i]) == 0) {
+	    if (der_heim_oid_cmp(&asn1_oid_id_x509_ce_anyExtendedKeyUsage,
+                                 &e.val[i]) == 0) {
 		free_ExtKeyUsage(&e);
 		return 0;
 	    }
-#endif
 	}
     }
     free_ExtKeyUsage(&e);