From 8b428648840a84674dafa7e849ec6ace9777f676 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Mon, 31 Jan 2011 14:37:48 +0100 Subject: [PATCH] fixed checking of unknown critical extensions in openssl_x509 --- src/libstrongswan/plugins/openssl/openssl_x509.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/plugins/openssl/openssl_x509.c b/src/libstrongswan/plugins/openssl/openssl_x509.c index dfbebe746a..ddc9d5b6e7 100644 --- a/src/libstrongswan/plugins/openssl/openssl_x509.c +++ b/src/libstrongswan/plugins/openssl/openssl_x509.c @@ -804,7 +804,7 @@ static bool parse_extensions(private_openssl_x509_t *this) ok = parse_crlDistributionPoints_ext(this, ext); break; default: - ok = X509_EXTENSION_get_critical(ext) != 0; + ok = X509_EXTENSION_get_critical(ext) == 0; if (!ok) { DBG1(DBG_LIB, "found unsupported critical X.509 extension"); -- 2.47.2