Apply a small patch from Diego R. Lopez <diego.lopez@rediris.es>,
authorRichard Levitte <levitte@openssl.org>
Sat, 26 Jan 2002 04:25:16 +0000 (04:25 +0000)
committerRichard Levitte <levitte@openssl.org>
Sat, 26 Jan 2002 04:25:16 +0000 (04:25 +0000)
making X509_check_issued() properly match an issuer that's found in a
Authority Key Identifier.

crypto/x509v3/v3_purp.c

index b739e4f..3068711 100644 (file)
@@ -615,7 +615,7 @@ int X509_check_issued(X509 *issuer, X509 *subject)
                                        break;
                                }
                        }
-                       if(nm && X509_NAME_cmp(nm, X509_get_issuer_name(issuer)))
+                       if(nm && X509_NAME_cmp(nm, X509_get_subject_name(issuer)))
                                return X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH;
                }
        }