From 3a074a799643b9ddbfd5c853b3d25af94d1a2c73 Mon Sep 17 00:00:00 2001
From: Paul Bakker <p.j.bakker@polarssl.org>
Date: Tue, 20 Aug 2013 12:45:03 +0200
Subject: [PATCH] Actually skip certificate if we do not understand hash type

---
 library/x509parse.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/library/x509parse.c b/library/x509parse.c
index dca5306661..08dc4d0ba5 100644
--- a/library/x509parse.c
+++ b/library/x509parse.c
@@ -3461,6 +3461,7 @@ static int x509parse_verify_top(
             /*
              * Cannot check 'unknown' hash
              */
+            trust_ca = trust_ca->next;
             continue;
         }