diff options
| -rw-r--r-- | src/crypto/x509/verify.go | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/crypto/x509/verify.go b/src/crypto/x509/verify.go index 3d9c115dba..5f4fc0b6f3 100644 --- a/src/crypto/x509/verify.go +++ b/src/crypto/x509/verify.go @@ -1284,12 +1284,12 @@ func policiesValid(chain []*Certificate, opts VerifyOptions) bool { } else { // 6.1.4 (b) (3) (i) -- as updated by RFC 9618 pg.deleteLeaf(mapping.IssuerDomainPolicy) - - // 6.1.4 (b) (3) (ii) -- as updated by RFC 9618 - pg.prune() } } + // 6.1.4 (b) (3) (ii) -- as updated by RFC 9618 + pg.prune() + for issuerStr, subjectPolicies := range mappings { // 6.1.4 (b) (1) -- as updated by RFC 9618 if matching := pg.leafWithPolicy(OID{der: []byte(issuerStr)}); matching != nil { |