Use >= consistently with max_bits.

diff --git a/src/lib/crypt_ops/crypto_rsa_nss.c b/src/lib/crypt_ops/crypto_rsa_nss.c
index 4cf6990670d8961ad92a2b6b5b9a1ef2b22c00c2..7abf6716f0893dab12a18f764e120162ee59eee4 100644 (file)
--- a/src/lib/crypt_ops/crypto_rsa_nss.c
+++ b/src/lib/crypt_ops/crypto_rsa_nss.c
@@ -736,7 +736,7 @@ crypto_pk_asn1_decode_private(const char *str, size_t len, int max_bits)
 
   if (output) {
     const int bits = SECKEY_PublicKeyStrengthInBits(output->pubkey);
-    if (max_bits > 0 && bits > max_bits) {
+    if (max_bits >= 0 && bits > max_bits) {
       log_info(LD_CRYPTO, "Private key longer than expected.");
       crypto_pk_free(output);
       output = NULL;