Check ca=false with flags too.

diff --git a/tests/chainverify.c b/tests/chainverify.c
index 1234ea9adea4eb7c5d18223955f57395614d27b8..a630da0fb0ee3264345041fa46133b7417cf0311 100644 (file)
--- a/tests/chainverify.c
+++ b/tests/chainverify.c
@@ -442,6 +442,9 @@ static struct
   { "self signed", pem_self_cert, &pem_self_cert[0],
     0, 0 },
   { "ca=false", thea_chain, &thea_chain[1],
+    GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT,
+    GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID },
+  { "ca=false2", thea_chain, &thea_chain[1],
     0, GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID },
   { "hbci v1 fail", hbci_chain, &hbci_chain[2],
     0, GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID},