Commit 63810d85 authored by Richard Levitte's avatar Richard Levitte
Browse files

Apply a small patch from Diego R. Lopez <diego.lopez@rediris.es>, 

making X509_check_issued() properly match an issuer that's found in a
Authority Key Identifier.
parent 123c4019

crypto/x509v3/v3_purp.c

+1 −1
Original line number Diff line number Diff line
@@ -615,7 +615,7 @@ int X509_check_issued(X509 *issuer, X509 *subject) 
					break;

				}

			}

			if(nm && X509_NAME_cmp(nm, X509_get_issuer_name(issuer)))

			if(nm && X509_NAME_cmp(nm, X509_get_subject_name(issuer)))

				return X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH;

		}

	}