From: Richard Levitte <levitte@openssl.org>
Date: Thu, 8 Feb 2001 19:28:10 +0000 (+0000)
Subject: The check for request including a nonce and response not having it was
X-Git-Tag: OpenSSL_0_9_6a-beta1~48^2~16
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=c2bf70a27cb5c7fa2072f35fd11ebd431323d9e9;p=oweals%2Fopenssl.git

The check for request including a nonce and response not having it was
inversed.  Corrected.  Hopefully, this will make it work without
dumping core.
---

diff --git a/crypto/ocsp/ocsp_ext.c b/crypto/ocsp/ocsp_ext.c
index 56c54f735b..dcd7869bfb 100644
--- a/crypto/ocsp/ocsp_ext.c
+++ b/crypto/ocsp/ocsp_ext.c
@@ -349,7 +349,7 @@ int OCSP_check_nonce(OCSP_REQUEST *req, OCSP_BASICRESP *bs)
 	resp_idx = OCSP_BASICRESP_get_ext_by_NID(bs, NID_id_pkix_OCSP_Nonce, -1);
 	/* If both absent its OK */
 	if((req_idx < 0) && (resp_idx < 0)) return 1;
-	if((req_idx < 0) && (resp_idx >= 0))
+	if((req_idx >= 0) && (resp_idx < 0))
 		{
 		OCSPerr(OCSP_F_OCSP_CHECK_NONCE, OCSP_R_NONCE_MISSING_IN_RESPONSE);
 		goto err;