Closed thijskh closed 9 years ago
@thijskh do you agree with my conclusion that we could reduce it to:
if (!isset($parsedMetaData[$certKey . 'X509Certificate'])) {
continue;
}
// Skip encryption keys if we don't support encryption usage.
if ($encryptionEnabled && !$parsedMetaData[$certKey . 'signing']) {
continue;
}
?
If a key is marked both encryption AND signing, the test would reject it because it considered it to be an encryption key.
Fixes #570