ELY-2692 Merge an if statement with the enclosing one in X509Revocati…

…onTrustManager
wildfly-security · Oct 18, 2023 · 83a81db · 83a81db
1 parent ba17f4c
commit 83a81db
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/ssl/src/main/java/org/wildfly/security/ssl/X509RevocationTrustManager.java b/ssl/src/main/java/org/wildfly/security/ssl/X509RevocationTrustManager.java
@@ -408,15 +408,14 @@ private void checkCertPathLength(X509Certificate currCert) throws CertPathValida
                 pathLenConstraint = maxPathLength;
             }
 
-            if (!subject.equals(issuer)) {
-                if (pathLenConstraint < i) {
+            if (!subject.equals(issuer) && pathLenConstraint < i) {
                     throw new CertPathValidatorException
                             ("check failed: pathLenConstraint violated - "
                                     + "this cert must be the last cert in the "
                                     + "certification path", null, null, -1,
                                     PKIXReason.PATH_TOO_LONG);
-                }
             }
+
             if (pathLenConstraint < maxPathLength)
                 maxPathLength = pathLenConstraint;
         }