Commit 268e78c3 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

PR: 1899 

Submitted by: Ger Hobbelt <ger@hobbelt.com>
Approved by: steve@openssl.org

Check for <= 0 when verifying CRL issuers.
parent c900a78c

crypto/x509/x509_vfy.c

+1 −1
Original line number Diff line number Diff line
@@ -1124,7 +1124,7 @@ static int check_crl_path(X509_STORE_CTX *ctx, X509 *x) 
	/* Verify CRL issuer */

	ret = X509_verify_cert(&crl_ctx);



	if (!ret)

	if (ret <= 0)

		goto err;



	/* Check chain is acceptable */