Fix test for proxy certs chain length, it was too restrictive.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19608 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -1498,7 +1498,7 @@ hx509_verify_path(hx509_context context,
|
|||||||
int j;
|
int j;
|
||||||
|
|
||||||
if (info.pCPathLenConstraint != NULL &&
|
if (info.pCPathLenConstraint != NULL &&
|
||||||
*info.pCPathLenConstraint < i + 1)
|
*info.pCPathLenConstraint < i)
|
||||||
{
|
{
|
||||||
free_ProxyCertInfo(&info);
|
free_ProxyCertInfo(&info);
|
||||||
ret = HX509_PATH_TOO_LONG;
|
ret = HX509_PATH_TOO_LONG;
|
||||||
|
Reference in New Issue
Block a user