Security-55179.1.tar.gz

[apple/security.git] / libsecurity_codesigning / lib / reqinterp.cpp

diff --git a/libsecurity_codesigning/lib/reqinterp.cpp b/libsecurity_codesigning/lib/reqinterp.cpp
index e3e823380fb79d56836a75b96e6605454978e886..cce6d48fbd0f0c8616dee0683931eb9a5cadf159 100644 (file)
--- a/libsecurity_codesigning/lib/reqinterp.cpp
+++ b/libsecurity_codesigning/lib/reqinterp.cpp
@@ -292,7 +292,7 @@ bool Requirement::Interpreter::certFieldPolicy(const CssmOid &oid, const Match &
 bool Requirement::Interpreter::appleAnchored()
 {
        if (SecCertificateRef cert = mContext->cert(anchorCert))
 bool Requirement::Interpreter::appleAnchored()
 {
        if (SecCertificateRef cert = mContext->cert(anchorCert))

-               if (verifyAnchor(cert, appleAnchorHash())
+               if (isAppleCA(cert)

 #if defined(TEST_APPLE_ANCHOR)
                        || verifyAnchor(cert, testAppleAnchorHash())
 #endif
 #if defined(TEST_APPLE_ANCHOR)
                        || verifyAnchor(cert, testAppleAnchorHash())
 #endif