From c2bf70a27cb5c7fa2072f35fd11ebd431323d9e9 Mon Sep 17 00:00:00 2001 From: Richard Levitte Date: Thu, 8 Feb 2001 19:28:10 +0000 Subject: [PATCH] The check for request including a nonce and response not having it was inversed. Corrected. Hopefully, this will make it work without dumping core. --- crypto/ocsp/ocsp_ext.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crypto/ocsp/ocsp_ext.c b/crypto/ocsp/ocsp_ext.c index 56c54f735b..dcd7869bfb 100644 --- a/crypto/ocsp/ocsp_ext.c +++ b/crypto/ocsp/ocsp_ext.c @@ -349,7 +349,7 @@ int OCSP_check_nonce(OCSP_REQUEST *req, OCSP_BASICRESP *bs) resp_idx = OCSP_BASICRESP_get_ext_by_NID(bs, NID_id_pkix_OCSP_Nonce, -1); /* If both absent its OK */ if((req_idx < 0) && (resp_idx < 0)) return 1; - if((req_idx < 0) && (resp_idx >= 0)) + if((req_idx >= 0) && (resp_idx < 0)) { OCSPerr(OCSP_F_OCSP_CHECK_NONCE, OCSP_R_NONCE_MISSING_IN_RESPONSE); goto err; -- 2.25.1