mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-22 16:45:41 +01:00
- Fixed new logic on certificate chains in x509parse_verify()
This commit is contained in:
parent
e9581d66b0
commit
7c6d4a4e6b
@ -1584,7 +1584,7 @@ int x509parse_verify( x509_cert *crt,
|
||||
|
||||
pathlen = 1;
|
||||
|
||||
while( cur->version != 0 )
|
||||
while( cur != NULL && cur->version != 0 )
|
||||
{
|
||||
if( cur->ca_istrue == 0 ||
|
||||
crt->issuer_raw.len != cur->subject_raw.len ||
|
||||
@ -1612,7 +1612,7 @@ int x509parse_verify( x509_cert *crt,
|
||||
/*
|
||||
* Atempt to validate topmost cert with our CA chain.
|
||||
*/
|
||||
while( trust_ca->version != 0 )
|
||||
while( trust_ca != NULL && trust_ca->version != 0 )
|
||||
{
|
||||
if( crt->issuer_raw.len != trust_ca->subject_raw.len ||
|
||||
memcmp( crt->issuer_raw.p, trust_ca->subject_raw.p,
|
||||
|
Loading…
Reference in New Issue
Block a user