set the invalid flag when the owner is unexpected.

diff --git a/lib/gnutls_x509.c b/lib/gnutls_x509.c
index 05ec2a5952a1422fb89b5bca36787a55d5b06ea9..70d58a5d0cf43f9fce33dfea97b71688213f0ecd 100644 (file)
--- a/lib/gnutls_x509.c
+++ b/lib/gnutls_x509.c
@@ -303,7 +303,7 @@ _gnutls_x509_cert_verify_peers(gnutls_session_t session,
                    gnutls_x509_crt_check_hostname(peer_certificate_list
                                                   [0], hostname);
                if (ret == 0)
-                       *status |= GNUTLS_CERT_UNEXPECTED_OWNER;
+                       *status |= GNUTLS_CERT_UNEXPECTED_OWNER|GNUTLS_CERT_INVALID;
        }
 
        CLEAR_CERTS;