[pkg-opensc-commit] [pkcs11-helper] 245/253: mbedtls: fix __pkcs11_crypto_mbedtls_cerificate_is_issuer()

[Eric Dorland]

This is an automated email from the git hooks/post-receive script.

eric pushed a commit to branch master
in repository pkcs11-helper.

commit f6bf05bc3a5a960338a9467676175270202384a9
Author: Steffan Karger <steffan at karger.me>
Date:   Thu Dec 8 21:08:00 2016 +0100

    mbedtls: fix __pkcs11_crypto_mbedtls_cerificate_is_issuer()
    
    Entire branch is missing if certificate is issuer.
    
    Signed-off-by: Steffan Karger <steffan at karger.me>
---
 ChangeLog                     | 1 +
 lib/_pkcs11h-crypto-mbedtls.c | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index eaf01f4..647d2bf 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,7 @@ $Id$
 
 ????-??-?? - Version 1.21
 
+ * mbedtls: fix missing logic if issur certificate, thanks to Steffan Karger
 
 2016-12-08 - Version 1.20
 
diff --git a/lib/_pkcs11h-crypto-mbedtls.c b/lib/_pkcs11h-crypto-mbedtls.c
index 21557e5..43c7b19 100644
--- a/lib/_pkcs11h-crypto-mbedtls.c
+++ b/lib/_pkcs11h-crypto-mbedtls.c
@@ -197,7 +197,9 @@ __pkcs11h_crypto_mbedtls_certificate_is_issuer (
 	}
 
 	if ( 0 == x509_crt_verify(&x509_cert, &x509_issuer, NULL, NULL,
-		&verify_flags, NULL, NULL ))
+		&verify_flags, NULL, NULL )) {
+		is_issuer = TRUE;
+	}
 
 cleanup:
 	x509_crt_free(&x509_cert);

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-opensc/pkcs11-helper.git