From: Matt Caswell <matt@openssl.org>
Date: Tue, 20 Mar 2018 11:16:39 +0000 (+0000)
Subject: Fix the OCSP responder mode
X-Git-Tag: OpenSSL_1_1_1-pre4~96
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=e46931108a1c4ae35903e4b6b481b341545f3ea3;p=oweals%2Fopenssl.git

Fix the OCSP responder mode

Broken by commit 3e3c7c36.

Fixes #5681

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/5688)
---

diff --git a/apps/ocsp.c b/apps/ocsp.c
index ed2281a596..7581531ccf 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -551,7 +551,7 @@ int ocsp_main(int argc, char **argv)
     }
 
     if (ridx_filename != NULL
-        && (rkey != NULL || rsigner != NULL || rca_cert != NULL)) {
+        && (rkey == NULL || rsigner == NULL || rca_cert == NULL)) {
         BIO_printf(bio_err,
                    "Responder mode requires certificate, key, and CA.\n");
         goto end;