diff options
| author |   henning <henning@openbsd.org> | 2002-10-07 20:23:05 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2002-10-07 20:23:05 +0000 |
| commit | 643b6f823addcd38235201e661dabb67704f185a (patch) | |
| tree | abe6c1077b291daa5611b26bfffd322d464cba7f /usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c | |
| parent | A few typos, and sync with reality. (diff) | |
| download | wireguard-openbsd-643b6f823addcd38235201e661dabb67704f185a.tar.xz wireguard-openbsd-643b6f823addcd38235201e661dabb67704f185a.zip | |
merge apache 1.3.27 and mod_ssl 2.8.11
Diffstat (limited to 'usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c')
| -rw-r--r-- | usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c b/usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c index e5a9c5eb6a3..9613da5d752 100644 --- a/usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c +++ b/usr.sbin/httpd/src/modules/ssl/ssl_engine_kernel.c @@ -1582,6 +1582,7 @@ int ssl_callback_SSLVerify_CRL( int i, n, rc; char *cp; char *cp2; + ASN1_TIME *t; /* * Unless a revocation store for CRLs was created we @@ -1671,14 +1672,13 @@ int ssl_callback_SSLVerify_CRL( /* * Check date of CRL to make sure it's not expired */ - i = X509_cmp_current_time(X509_CRL_get_nextUpdate(crl)); - if (i == 0) { + if ((t = X509_CRL_get_nextUpdate(crl)) == NULL) { ssl_log(s, SSL_LOG_WARN, "Found CRL has invalid nextUpdate field"); X509_STORE_CTX_set_error(ctx, X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD); X509_OBJECT_free_contents(&obj); return FALSE; } - if (i < 0) { + if (X509_cmp_current_time(t) < 0) { ssl_log(s, SSL_LOG_WARN, "Found CRL is expired - " "revoking all certificates until you get updated CRL"); |