Search from the beginning for altname. Closes #1946

FreeRADIUS · Mar 20, 2017 · dae5661 · dae5661
1 parent fcf39a0
commit dae5661
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/tls.c b/src/main/tls.c
@@ -2149,7 +2149,7 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
 	/*
 	 *	Get the RFC822 Subject Alternative Name
 	 */
-	loc = X509_get_ext_by_NID(client_cert, NID_subject_alt_name, 0);
+	loc = X509_get_ext_by_NID(client_cert, NID_subject_alt_name, -1);
 	if (certs && (lookup <= 1) && (loc >= 0)) {
 		X509_EXTENSION *ext = NULL;
 		GENERAL_NAMES *names = NULL;