Commit f36fedcc authored by David von Oheimb's avatar David von Oheimb Committed by Matt Caswell
Browse files

Fix OCSP_basic_verify() cert chain construction in case bs->certs is NULL (backport) 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4183)
parent 3281f1eb

crypto/ocsp/ocsp_vfy.c

+2 −0
Original line number Diff line number Diff line
@@ -118,6 +118,8 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs, 
                    goto end;

                }

            }

        } else if (certs != NULL) {

            untrusted = certs;

        } else {

            untrusted = bs->certs;

        }