diff options
| author | Shane Lontis <shane.lontis@oracle.com> | 2021-03-31 15:10:22 +1000 |
|---|---|---|
| committer | Shane Lontis <shane.lontis@oracle.com> | 2021-04-08 11:30:44 +1000 |
| commit | e6c2f96489fc0c006845c8597f8ceed2f01f76ee (patch) | |
| tree | 87b519bbf7cf1a1966d44fbd70121e1ba77d550d /crypto/ocsp/ocsp_vfy.c | |
| parent | 09fba0b44032c2f66d5e7e8c732869e031ce74c8 (diff) | |
Fix more certificate related lib_ctx settings.
Fixes #13732
Fix a few places that were not using the '_ex' variants of
ASN1_item_sign/verify.
Added X509_CRL_new_ex().
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14752)
Diffstat (limited to 'crypto/ocsp/ocsp_vfy.c')
| -rw-r--r-- | crypto/ocsp/ocsp_vfy.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/ocsp/ocsp_vfy.c b/crypto/ocsp/ocsp_vfy.c index 544748851f..fe878043ca 100644 --- a/crypto/ocsp/ocsp_vfy.c +++ b/crypto/ocsp/ocsp_vfy.c @@ -84,9 +84,9 @@ static int ocsp_verify(OCSP_REQUEST *req, OCSP_BASICRESP *bs, return -1; } if (req != NULL) - ret = OCSP_REQUEST_verify(req, skey); + ret = OCSP_REQUEST_verify(req, skey, signer->libctx, signer->propq); else - ret = OCSP_BASICRESP_verify(bs, skey); + ret = OCSP_BASICRESP_verify(bs, skey, signer->libctx, signer->propq); if (ret <= 0) ERR_raise(ERR_LIB_OCSP, OCSP_R_SIGNATURE_FAILURE); } |