[SCM] GNU gnutls branch, master, updated. gnutls_3_1_0-83-ge7b65df

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=e7b65df28abd19bd9a2e8de11d7b1c9ead9c5fcf

The branch, master has been updated
       via  e7b65df28abd19bd9a2e8de11d7b1c9ead9c5fcf (commit)
      from  70a3f32d55f7cd5ba14fef3ff3e545b478916316 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit e7b65df28abd19bd9a2e8de11d7b1c9ead9c5fcf
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Sun Sep 16 22:50:09 2012 +0200

    removed a now redundant chain check

-----------------------------------------------------------------------

Summary of changes:
 lib/x509/verify-high.c |   19 +++----------------
 1 files changed, 3 insertions(+), 16 deletions(-)

diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c
index a4f883f..d8addba 100644
--- a/lib/x509/verify-high.c
+++ b/lib/x509/verify-high.c
@@ -355,18 +355,6 @@ static int shorten_clist(gnutls_x509_trust_list_t list,
     uint32_t hash;
     gnutls_datum_t dn;
 
-    /* Start by truncating any disjoint list of certificates. For
-     * example, if the server presented a chain A->B->C->X->Y->Z
-     * where X is *not* actually the issuer of C, truncate at C.
-     */
-    for(i=1;i<clist_size;i++) {
-        if (!gnutls_x509_crt_check_issuer(certificate_list[i-1],
-                                          certificate_list[i])) {
-            gnutls_assert();
-            clist_size = i;
-        }
-    }
-
     if (clist_size > 1) {
         /* Check if the last certificate in the path is self signed.
          * In that case ignore it (a certificate is trusted only if it
@@ -440,10 +428,9 @@ static gnutls_x509_crt_t* sort_clist(gnutls_x509_crt_t 
sorted[MAX_CERTS_TO_SORT]
   for (i=0;i<MAX_CERTS_TO_SORT;i++)
     issuer[i] = -1;
 
-    /* Start by truncating any disjoint list of certificates. For
-     * example, if the server presented a chain A->B->C->X->Y->Z
-     * where X is *not* actually the issuer of C, truncate at C.
-     */
+  /* Find the issuer of each certificate and store it
+   * in issuer array.
+   */
   for(i=0;i<*clist_size;i++) 
     {
       for (j=1;j<*clist_size;j++) 


hooks/post-receive
-- 
GNU gnutls