[xmlsec] fix CRL check



commit 2e7c56fb395d554f2123a0dfc08881ed4d85c794
Author: Aleksey Sanin <aleksey aleksey com>
Date:   Thu May 22 08:50:14 2014 -0700

    fix CRL check

 src/openssl/x509vfy.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/src/openssl/x509vfy.c b/src/openssl/x509vfy.c
index fe51da4..ca5a462 100644
--- a/src/openssl/x509vfy.c
+++ b/src/openssl/x509vfy.c
@@ -951,6 +951,7 @@ xmlSecOpenSSLX509VerifyCertAgainstCrls(STACK_OF(X509_CRL) *crls, X509* cert) {
      * Try to retrieve a CRL corresponding to the issuer of
      * the current certificate
      */
+    issuer = X509_get_issuer_name(cert);
     n = sk_X509_CRL_num(crls);
     for(i = 0; i < n; i++) {
         crl = sk_X509_CRL_value(crls, i);
@@ -958,7 +959,6 @@ xmlSecOpenSSLX509VerifyCertAgainstCrls(STACK_OF(X509_CRL) *crls, X509* cert) {
             continue;
         }
 
-        issuer = X509_CRL_get_issuer(crl);
         if(xmlSecOpenSSLX509NamesCompare(X509_CRL_get_issuer(crl), issuer) == 0) {
             break;
         }


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]