mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 07:33:27 -06:00
certdb: fix AttributeError
in verify_ca_cert_validity
`NSSDatabase.verify_ca_cert_validity` tries to access a property of basic constraints extension on the extension object itself rather than its value. Access the attribute on the correct object to fix the issue. Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
This commit is contained in:
parent
40a60675f3
commit
720034f1b4
@ -569,7 +569,7 @@ class NSSDatabase(object):
|
||||
except cryptography.x509.ExtensionNotFound:
|
||||
raise ValueError("missing basic constraints")
|
||||
|
||||
if not bc.ca:
|
||||
if not bc.value.ca:
|
||||
raise ValueError("not a CA certificate")
|
||||
|
||||
try:
|
||||
|
Loading…
Reference in New Issue
Block a user