Fix CSR parsing header call

Change the secondary X509 CSR parsing call for the alternative MS header to only occur if the first call fails due to the header being unfound, instead of any call.
Mbed-TLS · Oct 7, 2018 · e1660af · e1660af
1 parent 5199227
commit e1660af
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/library/x509_csr.c b/library/x509_csr.c
@@ -282,13 +282,14 @@ int mbedtls_x509_csr_parse( mbedtls_x509_csr *csr, const unsigned char *buf, siz
                                        "-----BEGIN CERTIFICATE REQUEST-----",
                                        "-----END CERTIFICATE REQUEST-----",
                                        buf, NULL, 0, &use_len );
-        if( ret != 0 )
+        if( ret == MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT )
         {
             ret = mbedtls_pem_read_buffer( &pem,
                                            "-----BEGIN NEW CERTIFICATE REQUEST-----",
                                            "-----END NEW CERTIFICATE REQUEST-----",
                                            buf, NULL, 0, &use_len );
         }
+
         if( ret == 0 )
         {
             /*