remove multiple layer identity restriction
Change-Id: I0acc216060aa0454c08b14aa2fa3559713b911e9
diff --git a/src/ca-module.cpp b/src/ca-module.cpp
index 377486f..9058c60 100644
--- a/src/ca-module.cpp
+++ b/src/ca-module.cpp
@@ -283,7 +283,7 @@
// verify the self-signed certificate, the request, and the token
if (!m_config.m_caPrefix.isPrefixOf(clientCert->getName()) // under ca prefix
|| !security::v2::Certificate::isValidName(clientCert->getName()) // is valid cert name
- || clientCert->getName().size() != m_config.m_caPrefix.size() + IS_SUBNAME_MIN_OFFSET) {
+ || clientCert->getName().size() < m_config.m_caName.size() + IS_SUBNAME_MIN_OFFSET) {
_LOG_ERROR("Invalid self-signed certificate name " << clientCert->getName());
return;
}