Commit a9ff742e authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Make explicit_policy handling match expected RFC3280 behaviour.

parent 787287af

crypto/x509v3/pcy_tree.c

+4 −4
Original line number Diff line number Diff line
@@ -130,11 +130,11 @@ static int tree_init(X509_POLICY_TREE **ptree, STACK_OF(X509) *certs, 
			ret = 2;

		if (explicit_policy > 0)

			{

			if (!(x->ex_flags & EXFLAG_SI))

				explicit_policy--;

			if (!(x->ex_flags & EXFLAG_SI)

				&& (cache->explicit_skip != -1)

			if ((cache->explicit_skip != -1)

				&& (cache->explicit_skip < explicit_policy))

				explicit_policy = cache->explicit_skip + 1;

				explicit_policy = cache->explicit_skip;

			}

		}