corrected bug which did not allow a client to accept multiple CA distinguished

names.

diff --git a/NEWS b/NEWS
index fe3551fc7c216a1ee6b356b90350d612e1deb23d..0f9cf91d0785e83cdca71c3bf01bd032e51aea52 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,6 @@
+Version ?.?.?
+- Corrected bug which did not allow a client to accept multiple CA names
+
 Version 0.3.1 (21/12/2001)
 - Corrections in the configuration files
 - Fixes a bug in anonymous authentication

diff --git a/lib/auth_x509.c b/lib/auth_x509.c
index a7ab7078a736d4b9760ab3c72aff4bcecf2cc277..da5376e0a815944703fb32e6b5348939ec092cca 100644 (file)
--- a/lib/auth_x509.c
+++ b/lib/auth_x509.c
@@ -195,7 +195,8 @@ int gnutls_x509pki_extract_dn(const gnutls_datum * idn, gnutls_DN * rdn)
 
 
 /* Finds the appropriate certificate depending on the cA Distinguished name
- * advertized by the server. If none matches then returns -1 as index.
+ * advertized by the server. If none matches then returns 0 and -1 as index.
+ * In case of an error a negative value, is returned.
  */
 static int _gnutls_find_acceptable_client_cert(GNUTLS_STATE state,
                                               opaque * _data,
@@ -265,7 +266,6 @@ static int _gnutls_find_acceptable_client_cert(GNUTLS_STATE state,
                                break;
 
                        /* move to next record */
-                       data_size -= size;
                        if (data_size <= 0)
                                break;