summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPhil Pennock <pdp@exim.org>2017-02-24 22:39:02 -0500
committerJeremy Harris <jgh146exb@wizmail.org>2017-02-25 15:15:30 +0000
commita1ffb9714577b05e570d1150cd6a2200c1eb8eb6 (patch)
tree476da481d8dc9f4fa1f75637d93bfd556a4dd4c5
parent2c0f3ea1858d9dafc8600f9d97bc6e57594c22d0 (diff)
Pull in vdukhovni/ssl_dane 8270afba fix
Negating an int and comparing to another int was a bug which we got lucky on.
-rw-r--r--src/src/dane-openssl.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/src/dane-openssl.c b/src/src/dane-openssl.c
index bb927383f..97acccb5a 100644
--- a/src/src/dane-openssl.c
+++ b/src/src/dane-openssl.c
@@ -667,7 +667,7 @@ for (n = sk_X509_num(in); n > 0; --n, ++depth)
{
if (grow_chain(dane, UNTRUSTED, ca))
{
- if (!X509_check_issued(ca, ca) == X509_V_OK)
+ if (X509_check_issued(ca, ca) != X509_V_OK)
{
/* Restart with issuer as subject */
cert = ca;