From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Thu, 20 Mar 2014 09:35:14 +0000 (+0100)
Subject: set the invalid flag when the owner is unexpected.
X-Git-Tag: gnutls_3_3_0pre0~23
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1dcf6fce00eea99082a5ad097d6660aa2000e75c;p=thirdparty%2Fgnutls.git

set the invalid flag when the owner is unexpected.
---

diff --git a/lib/gnutls_x509.c b/lib/gnutls_x509.c
index 05ec2a5952..70d58a5d0c 100644
--- a/lib/gnutls_x509.c
+++ b/lib/gnutls_x509.c
@@ -303,7 +303,7 @@ _gnutls_x509_cert_verify_peers(gnutls_session_t session,
 		    gnutls_x509_crt_check_hostname(peer_certificate_list
 						   [0], hostname);
 		if (ret == 0)
-			*status |= GNUTLS_CERT_UNEXPECTED_OWNER;
+			*status |= GNUTLS_CERT_UNEXPECTED_OWNER|GNUTLS_CERT_INVALID;
 	}
 
 	CLEAR_CERTS;