diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-06 18:24:28 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-06 18:24:28 +0000 |
| commit | abd2ed012b37e624b241f5ab8fd8442140106fd6 (patch) | |
| tree | 80a6200c3e3f2fb430cc98d791b3f7e1c5ccf607 /crypto/x509 | |
| parent | 3bf15e2974f416cb970ef54fae0f600ec299000e (diff) | |
| download | openssl-abd2ed012b37e624b241f5ab8fd8442140106fd6.tar.gz | |
Fix two bugs which affect delta CRL handling:
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
Diffstat (limited to 'crypto/x509')
| -rw-r--r-- | crypto/x509/x509_vfy.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index 8ba03d5d43..d96d500f5c 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -968,7 +968,7 @@ static int crl_extension_match(X509_CRL *a, X509_CRL *b, int nid) { ASN1_OCTET_STRING *exta, *extb; int i; - i = X509_CRL_get_ext_by_NID(a, nid, 0); + i = X509_CRL_get_ext_by_NID(a, nid, -1); if (i >= 0) { /* Can't have multiple occurrences */ @@ -979,7 +979,7 @@ static int crl_extension_match(X509_CRL *a, X509_CRL *b, int nid) else exta = NULL; - i = X509_CRL_get_ext_by_NID(b, nid, 0); + i = X509_CRL_get_ext_by_NID(b, nid, -1); if (i >= 0) { |