Commit 45cd59ac authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

If not checking all certificates don't attempt to find a CRL 

for the leaf certificate of a CRL path.
parent d11d977d

crypto/x509/x509_vfy.c

+5 −0
Original line number Diff line number Diff line
@@ -679,7 +679,12 @@ static int check_revocation(X509_STORE_CTX *ctx) 
	if (ctx->param->flags & X509_V_FLAG_CRL_CHECK_ALL)

		last = sk_X509_num(ctx->chain) - 1;

	else

		{

		/* If checking CRL paths this isn't the EE certificate */

		if (ctx->parent)

			return 1;

		last = 0;

		}

	for(i = 0; i <= last; i++)

		{

		ctx->error_depth = i;