From d1d746afb4f628fb202f72b04c4fe376e86d7123 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 22 Oct 2009 23:14:12 +0000 Subject: [PATCH] Need to check <= 0 here. --- crypto/x509/x509_vfy.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index c680980f8a..d1a15502a2 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -1387,7 +1387,7 @@ static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl) if (!(ctx->current_crl_score & CRL_SCORE_SAME_PATH)) { - if (!check_crl_path(ctx, ctx->current_issuer)) + if (check_crl_path(ctx, ctx->current_issuer) <= 0) { ctx->error = X509_V_ERR_CRL_PATH_VALIDATION_ERROR; ok = ctx->verify_cb(0, ctx); -- 2.25.1