From b4ca985700bd934e3ece25081f8562261300043a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Sun, 31 Dec 2006 01:31:28 +0000
Subject: [PATCH] Fix test for proxy certs chain length, it was too
 restrictive.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19608 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/hx509/cert.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/hx509/cert.c b/lib/hx509/cert.c
index 27d143849..7096f78c8 100644
--- a/lib/hx509/cert.c
+++ b/lib/hx509/cert.c
@@ -1498,7 +1498,7 @@ hx509_verify_path(hx509_context context,
 		int j;
 
 		if (info.pCPathLenConstraint != NULL &&
-		    *info.pCPathLenConstraint < i + 1)
+		    *info.pCPathLenConstraint < i)
 		{
 		    free_ProxyCertInfo(&info);
 		    ret = HX509_PATH_TOO_LONG;