Commit 192ebef8 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

In ocsp_match_issuerid() we are passed the CA that signed the responder 

certificate so need to match its subject with the certificate IDs in the
response.
parent b01ab143

crypto/ocsp/ocsp_vfy.c

+1 −1
Original line number Diff line number Diff line
@@ -305,7 +305,7 @@ static int ocsp_match_issuerid(X509 *cert, OCSP_CERTID *cid, 
		if ((cid->issuerNameHash->length != mdlen) ||

		   (cid->issuerKeyHash->length != mdlen))

			return 0;

		iname = X509_get_issuer_name(cert);

		iname = X509_get_subject_name(cert);

		if (!X509_NAME_digest(iname, dgst, md, NULL))

			return -1;

		if (memcmp(md, cid->issuerNameHash->data, mdlen))