diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2001-07-11 22:42:20 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2001-07-11 22:42:20 +0000 |
| commit | 192ebef8cf037bca5025a4291cf2dbefc91356f7 (patch) | |
| tree | 3855779dbc7894ff33a9032acd4b41d0470bdb72 /crypto/ocsp | |
| parent | b01ab143389b7a28eaacf248b64c732872b40660 (diff) | |
In ocsp_match_issuerid() we are passed the CA that signed the responder
certificate so need to match its subject with the certificate IDs in the
response.
Diffstat (limited to 'crypto/ocsp')
| -rw-r--r-- | crypto/ocsp/ocsp_vfy.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/ocsp/ocsp_vfy.c b/crypto/ocsp/ocsp_vfy.c index be399a3a35..43b62a8cb8 100644 --- a/crypto/ocsp/ocsp_vfy.c +++ b/crypto/ocsp/ocsp_vfy.c @@ -305,7 +305,7 @@ static int ocsp_match_issuerid(X509 *cert, OCSP_CERTID *cid, if ((cid->issuerNameHash->length != mdlen) || (cid->issuerKeyHash->length != mdlen)) return 0; - iname = X509_get_issuer_name(cert); + iname = X509_get_subject_name(cert); if (!X509_NAME_digest(iname, dgst, md, NULL)) return -1; if (memcmp(md, cid->issuerNameHash->data, mdlen)) |