Re: [Swan-dev] Different subCA issue

2015-12-08 Thread Tuomo Soini
On Mon, 7 Dec 2015 10:31:25 -0500 (EST) Paul Wouters wrote: > > Tuomo described a case that failed: > > conn A > rightca=ROOTCA1 > rightid=@someone > also=common > conn B > rightca=SUBROOTCA1 > rightid=@someoneelse > also=common While code might be wrong it

[Swan-dev] Different subCA issue

2015-12-07 Thread Paul Wouters
Tuomo described a case that failed: conn A rightca=ROOTCA1 rightid=@someone also=common conn B rightca=SUBROOTCA1 rightid=@someoneelse also=common In refine_host_connection() we have this snippit: bool match3 = match_reques