diff options
author | Phil Pennock <pdp@exim.org> | 2017-02-24 22:39:02 -0500 |
---|---|---|
committer | Jeremy Harris <jgh146exb@wizmail.org> | 2017-02-25 15:15:30 +0000 |
commit | a1ffb9714577b05e570d1150cd6a2200c1eb8eb6 (patch) | |
tree | 476da481d8dc9f4fa1f75637d93bfd556a4dd4c5 | |
parent | 2c0f3ea1858d9dafc8600f9d97bc6e57594c22d0 (diff) |
Pull in vdukhovni/ssl_dane 8270afba fix
Negating an int and comparing to another int was a bug which we got
lucky on.
-rw-r--r-- | src/src/dane-openssl.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/src/dane-openssl.c b/src/src/dane-openssl.c index bb927383f..97acccb5a 100644 --- a/src/src/dane-openssl.c +++ b/src/src/dane-openssl.c @@ -667,7 +667,7 @@ for (n = sk_X509_num(in); n > 0; --n, ++depth) { if (grow_chain(dane, UNTRUSTED, ca)) { - if (!X509_check_issued(ca, ca) == X509_V_OK) + if (X509_check_issued(ca, ca) != X509_V_OK) { /* Restart with issuer as subject */ cert = ca; |