diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2017-04-03 10:20:41 +0000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-04-03 12:40:55 +0000 |
| commit | 720034f1b440135671d03596368ed5e9e5a0f3c3 (patch) | |
| tree | e41e4257c16e707accc7d317b1953788d752c29a /ipapython | |
| parent | 40a60675f3feb118af70562582399afefe97214d (diff) | |
| download | freeipa-720034f1b440135671d03596368ed5e9e5a0f3c3.tar.gz freeipa-720034f1b440135671d03596368ed5e9e5a0f3c3.tar.xz freeipa-720034f1b440135671d03596368ed5e9e5a0f3c3.zip | |
certdb: fix `AttributeError` in `verify_ca_cert_validity`
`NSSDatabase.verify_ca_cert_validity` tries to access a property of basic
constraints extension on the extension object itself rather than its value.
Access the attribute on the correct object to fix the issue.
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Diffstat (limited to 'ipapython')
| -rw-r--r-- | ipapython/certdb.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipapython/certdb.py b/ipapython/certdb.py index 82b3869c4..4485f7367 100644 --- a/ipapython/certdb.py +++ b/ipapython/certdb.py @@ -569,7 +569,7 @@ class NSSDatabase(object): except cryptography.x509.ExtensionNotFound: raise ValueError("missing basic constraints") - if not bc.ca: + if not bc.value.ca: raise ValueError("not a CA certificate") try: |