From: Simon Josefsson <simon@josefsson.org>
Date: Wed, 10 Dec 2008 16:10:47 +0000 (+0100)
Subject: Check ca=false with flags too.
X-Git-Tag: gnutls_2_7_3~2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e0e0a20c400a23aea1d87611f3c4913c97855dd7;p=thirdparty%2Fgnutls.git

Check ca=false with flags too.
---

diff --git a/tests/chainverify.c b/tests/chainverify.c
index 1234ea9ade..a630da0fb0 100644
--- a/tests/chainverify.c
+++ b/tests/chainverify.c
@@ -442,6 +442,9 @@ static struct
   { "self signed", pem_self_cert, &pem_self_cert[0],
     0, 0 },
   { "ca=false", thea_chain, &thea_chain[1],
+    GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT,
+    GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID },
+  { "ca=false2", thea_chain, &thea_chain[1],
     0, GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID },
   { "hbci v1 fail", hbci_chain, &hbci_chain[2],
     0, GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID},