From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sun, 30 Dec 2001 17:55:51 +0000 (+0000)
Subject: corrected bug which did not allow a client to accept multiple CA distinguished
X-Git-Tag: gnutls_0_3_2~22
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ef228b1d462822cb52ff8e2fcba0f53a5ada7138;p=thirdparty%2Fgnutls.git

corrected bug which did not allow a client to accept multiple CA distinguished
names.
---

diff --git a/NEWS b/NEWS
index fe3551fc7c..0f9cf91d07 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,6 @@
+Version ?.?.?
+- Corrected bug which did not allow a client to accept multiple CA names
+
 Version 0.3.1 (21/12/2001)
 - Corrections in the configuration files
 - Fixes a bug in anonymous authentication
diff --git a/lib/auth_x509.c b/lib/auth_x509.c
index a7ab7078a7..da5376e0a8 100644
--- a/lib/auth_x509.c
+++ b/lib/auth_x509.c
@@ -195,7 +195,8 @@ int gnutls_x509pki_extract_dn(const gnutls_datum * idn, gnutls_DN * rdn)
 
 
 /* Finds the appropriate certificate depending on the cA Distinguished name
- * advertized by the server. If none matches then returns -1 as index.
+ * advertized by the server. If none matches then returns 0 and -1 as index.
+ * In case of an error a negative value, is returned.
  */
 static int _gnutls_find_acceptable_client_cert(GNUTLS_STATE state,
 					       opaque * _data,
@@ -265,7 +266,6 @@ static int _gnutls_find_acceptable_client_cert(GNUTLS_STATE state,
 				break;
 
 			/* move to next record */
-			data_size -= size;
 			if (data_size <= 0)
 				break;