Avoid reaching into X509_ALGOR in ocsp_certid_print()

ok jsing

1 files changed, 6 insertions, 2 deletions

diff --git a/src/lib/libcrypto/ocsp/ocsp_prn.c b/src/lib/libcrypto/ocsp/ocsp_prn.c
index 7e3175b613..fb7b9651d9 100644
--- a/src/lib/libcrypto/ocsp/ocsp_prn.c
+++ b/src/lib/libcrypto/ocsp/ocsp_prn.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ocsp_prn.c,v 1.10 2023/07/08 10:44:00 beck Exp $ */
+/* $OpenBSD: ocsp_prn.c,v 1.11 2024/08/28 06:18:44 tb Exp $ */
 /* Written by Tom Titchener <Tom_Titchener@groove.net> for the OpenSSL
  * project. */
 
@@ -65,16 +65,20 @@
 #include <openssl/err.h>
 #include <openssl/ocsp.h>
 #include <openssl/pem.h>
+#include <openssl/x509.h>
 
 #include "ocsp_local.h"
 
 static int
 ocsp_certid_print(BIO *bp, OCSP_CERTID* a, int indent)
 {
+        const ASN1_OBJECT *aobj;
+
         BIO_printf(bp, "%*sCertificate ID:\n", indent, "");
         indent += 2;
         BIO_printf(bp, "%*sHash Algorithm: ", indent, "");
-        i2a_ASN1_OBJECT(bp, a->hashAlgorithm->algorithm);
+        X509_ALGOR_get0(&aobj, NULL, NULL, a->hashAlgorithm);
+        i2a_ASN1_OBJECT(bp, aobj);
         BIO_printf(bp, "\n%*sIssuer Name Hash: ", indent, "");
         i2a_ASN1_STRING(bp, a->issuerNameHash, V_ASN1_OCTET_STRING);
         BIO_printf(bp, "\n%*sIssuer Key Hash: ", indent, "");