cgmnlm

commit 996bd24225e7a63fd160d1feb9af193225a065b3
parent df2e4f8ab2f151eac61702b27f8c5cfe4145912e
Author: Drew DeVault <sir@cmpwn.com>
Date:   Thu,  4 Mar 2021 12:58:50 -0500

Discard CA certs unless there's no other

Diffstat:
M
src/tofu.c
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/src/tofu.c b/src/tofu.c
@@ -63,6 +63,9 @@ xt_end_cert(const br_x509_class **ctx)
 		cc->err = err;
 		return;
 	}
+	if (br_x509_decoder_isCA(&cc->decoder) && cc->pkey) {
+		return;
+	}
 	cc->pkey = br_x509_decoder_get_pkey(&cc->decoder);
 	br_sha512_out(&cc->sha512, &cc->hash);
 }