diff options
| author | tb <> | 2021-03-23 20:04:29 +0000 |
|---|---|---|
| committer | tb <> | 2021-03-23 20:04:29 +0000 |
| commit | 22638d4b1be941de65b47260040fef489ae2afe9 (patch) | |
| tree | 9599ce33efd1a6874f489965c11f0fb3c0a5d357 /src | |
| parent | b5a3abce7cfa7d60c34ab3c9c32a9ae5b18dfd0e (diff) | |
| download | openbsd-22638d4b1be941de65b47260040fef489ae2afe9.tar.gz openbsd-22638d4b1be941de65b47260040fef489ae2afe9.tar.bz2 openbsd-22638d4b1be941de65b47260040fef489ae2afe9.zip | |
OCSP_basic_verify() doesn't set errno, so use tls_set_errorx()
ok inoguchi
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/libtls/tls_ocsp.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/libtls/tls_ocsp.c b/src/lib/libtls/tls_ocsp.c index 32c372ed59..f00e6bc84b 100644 --- a/src/lib/libtls/tls_ocsp.c +++ b/src/lib/libtls/tls_ocsp.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: tls_ocsp.c,v 1.19 2019/12/03 14:56:42 tb Exp $ */ | 1 | /* $OpenBSD: tls_ocsp.c,v 1.20 2021/03/23 20:04:29 tb Exp $ */ |
| 2 | /* | 2 | /* |
| 3 | * Copyright (c) 2015 Marko Kreen <markokr@gmail.com> | 3 | * Copyright (c) 2015 Marko Kreen <markokr@gmail.com> |
| 4 | * Copyright (c) 2016 Bob Beck <beck@openbsd.org> | 4 | * Copyright (c) 2016 Bob Beck <beck@openbsd.org> |
| @@ -218,7 +218,7 @@ tls_ocsp_verify_response(struct tls *ctx, OCSP_RESPONSE *resp) | |||
| 218 | /* now verify */ | 218 | /* now verify */ |
| 219 | if (OCSP_basic_verify(br, ctx->ocsp->extra_certs, | 219 | if (OCSP_basic_verify(br, ctx->ocsp->extra_certs, |
| 220 | SSL_CTX_get_cert_store(ctx->ssl_ctx), flags) != 1) { | 220 | SSL_CTX_get_cert_store(ctx->ssl_ctx), flags) != 1) { |
| 221 | tls_set_error(ctx, "ocsp verify failed"); | 221 | tls_set_errorx(ctx, "ocsp verify failed"); |
| 222 | goto err; | 222 | goto err; |
| 223 | } | 223 | } |
| 224 | 224 | ||