Commit 0b5efa57 authored by Jay Satiro's avatar Jay Satiro Committed by Daniel Stenberg
Browse files

cyassl: Fix certificate load check 

SSL_CTX_load_verify_locations can return negative values on fail,
therefore to check for failure we check if load is != 1 (success)
instead of if load is == 0 (failure), the latter being incorrect given
that behavior.
parent 21e82bd6

lib/vtls/cyassl.c

+3 −3
Original line number Diff line number Diff line
@@ -140,7 +140,7 @@ cyassl_connect_step1(struct connectdata *conn, 
#ifndef NO_FILESYSTEM

  /* load trusted cacert */

  if(data->set.str[STRING_SSL_CAFILE]) {

    if(!SSL_CTX_load_verify_locations(conssl->ctx,

    if(1 != SSL_CTX_load_verify_locations(conssl->ctx,

                                          data->set.str[STRING_SSL_CAFILE],

                                          data->set.str[STRING_SSL_CAPATH])) {

      if(data->set.ssl.verifypeer) {