]> git.ipfire.org Git - thirdparty/krb5.git/commit
Don't fail if a candidate certificate has no SANs
authorNalin Dahyabhai <nalin@redhat.com>
Mon, 14 Jan 2013 18:57:54 +0000 (13:57 -0500)
committerGreg Hudson <ghudson@mit.edu>
Fri, 10 May 2013 20:03:29 +0000 (16:03 -0400)
commit2a39ca97af97ddd508262eab33e5a0fa6abc4b00
treeffb5d9a0a43a46f0125e715a835cbee197394215
parent1e8ec647b9c3ee20298245fb7958fe6fbeb81619
Don't fail if a candidate certificate has no SANs

When we're doing certificate matching and we're asked for the list of
SAN values for a certifiate, and it contains none, don't return an
error, as that will eventually cause the module to just return an error.
Instead, just return an empty list of SAN values so that processing will
continue on to check if other certificates match.
src/plugins/preauth/pkinit/pkinit_crypto_nss.c