From f93a3c433560f59885cc81800b8b0f6c7c4c69c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= <mpg@elzevir.fr>
Date: Wed, 9 Apr 2014 14:08:12 +0200
Subject: [PATCH] Check the CA bit on trusted CAs too

---
 library/x509_crt.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/library/x509_crt.c b/library/x509_crt.c
index 47745a759..94d855211 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -1607,6 +1607,7 @@ static int x509_crt_verify_top(
     while( trust_ca != NULL )
     {
         if( trust_ca->version == 0 ||
+            trust_ca->ca_istrue == 0 ||
             child->issuer_raw.len != trust_ca->subject_raw.len ||
             memcmp( child->issuer_raw.p, trust_ca->subject_raw.p,
                     child->issuer_raw.len ) != 0 )