diff options
| author | Richard Levitte <levitte@openssl.org> | 2001-02-08 19:28:10 +0000 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2001-02-08 19:28:10 +0000 |
| commit | c2bf70a27cb5c7fa2072f35fd11ebd431323d9e9 (patch) | |
| tree | 599687beddef1993f5cdb71a97aea2d650e32ae2 /crypto/ocsp | |
| parent | 9235adbf47cb5bd045742e762e3d17e31b2ed553 (diff) | |
| download | openssl-c2bf70a27cb5c7fa2072f35fd11ebd431323d9e9.tar.gz | |
The check for request including a nonce and response not having it was
inversed. Corrected. Hopefully, this will make it work without
dumping core.
Diffstat (limited to 'crypto/ocsp')
| -rw-r--r-- | crypto/ocsp/ocsp_ext.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/ocsp/ocsp_ext.c b/crypto/ocsp/ocsp_ext.c index 56c54f735b..dcd7869bfb 100644 --- a/crypto/ocsp/ocsp_ext.c +++ b/crypto/ocsp/ocsp_ext.c @@ -349,7 +349,7 @@ int OCSP_check_nonce(OCSP_REQUEST *req, OCSP_BASICRESP *bs) resp_idx = OCSP_BASICRESP_get_ext_by_NID(bs, NID_id_pkix_OCSP_Nonce, -1); /* If both absent its OK */ if((req_idx < 0) && (resp_idx < 0)) return 1; - if((req_idx < 0) && (resp_idx >= 0)) + if((req_idx >= 0) && (resp_idx < 0)) { OCSPerr(OCSP_F_OCSP_CHECK_NONCE, OCSP_R_NONCE_MISSING_IN_RESPONSE); goto err; |