From: Dr. Stephen Henson <steve@openssl.org>
Date: Fri, 27 May 2005 13:19:25 +0000 (+0000)
Subject: Assing check_{cert,crl}_time to 'ok' variable so it returns errors on
X-Git-Tag: OpenSSL_0_9_8-beta3~13^2~6
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=3f791ca8188b71cba77e718d2d5c2ed7613d3b6a;p=oweals%2Fopenssl.git

Assing check_{cert,crl}_time to 'ok' variable so it returns errors on
expiry.
---

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 637e2b6142..5711367232 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -776,7 +776,8 @@ static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)
 			}
 		}
 
-	if (!check_crl_time(ctx, crl, 1))
+	ok = check_crl_time(ctx, crl, 1);
+	if (!ok)
 		goto err;
 
 	ok = 1;
@@ -1006,7 +1007,8 @@ static int internal_verify(X509_STORE_CTX *ctx)
 
 		xs->valid = 1;
 
-		if (!check_cert_time(ctx, xs))
+		ok = check_cert_time(ctx, xs);
+		if (!ok)
 			goto end;
 
 		/* The last error (if any) is still in the error value */