Merge pull request #5021 from JacobBarthelmeh/certs

allow up to and including CTC_MAX_SKID_SIZE (32 byte hash)
This commit is contained in:
David Garske 2022-04-05 09:46:34 -07:00 committed by GitHub
commit e9a238ca86
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -44499,7 +44499,7 @@ void* wolfSSL_GetHKDFExtractCtx(WOLFSSL* ssl)
cert->isCA = wolfSSL_X509_get_isCA(x509);
#ifdef WOLFSSL_CERT_EXT
if (x509->subjKeyIdSz < CTC_MAX_SKID_SIZE) {
if (x509->subjKeyIdSz <= CTC_MAX_SKID_SIZE) {
if (x509->subjKeyId) {
XMEMCPY(cert->skid, x509->subjKeyId, x509->subjKeyIdSz);
}