[potentially dangerous] allow certs without name constraints

briansmith#208
nyantec · Apr 8, 2021 · 0407eb7 · 0407eb7
1 parent 8840b2d
commit 0407eb7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/name.rs b/src/name.rs
@@ -173,8 +173,8 @@ pub fn check_name_constraints(
         }
         let subtrees = der::nested(inner, subtrees_tag, Error::BadDER, |tagged| {
             der::expect_tag_and_get_value(tagged, der::Tag::Sequence)
-        })?;
-        Ok(Some(subtrees))
+        });
+        Ok(subtrees.ok())
     }
 
     let permitted_subtrees = parse_subtrees(input, der::Tag::ContextSpecificConstructed0)?;