diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2005-05-27 13:19:25 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2005-05-27 13:19:25 +0000 |
| commit | 3f791ca8188b71cba77e718d2d5c2ed7613d3b6a (patch) | |
| tree | 9a6083adfb879c53ac9d74ef1ac47cc7abbe1df2 /crypto/x509 | |
| parent | 0ebfcc8f92736c900bae4066040b67f6e5db8edb (diff) | |
Assing check_{cert,crl}_time to 'ok' variable so it returns errors on
expiry.
Diffstat (limited to 'crypto/x509')
| -rw-r--r-- | crypto/x509/x509_vfy.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index 637e2b6142..5711367232 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -776,7 +776,8 @@ static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl) } } - if (!check_crl_time(ctx, crl, 1)) + ok = check_crl_time(ctx, crl, 1); + if (!ok) goto err; ok = 1; @@ -1006,7 +1007,8 @@ static int internal_verify(X509_STORE_CTX *ctx) xs->valid = 1; - if (!check_cert_time(ctx, xs)) + ok = check_cert_time(ctx, xs); + if (!ok) goto end; /* The last error (if any) is still in the error value */ |