Correct tlsext_ocsp_resplen check.

This variable is currently overloaded - a value of -1 means that it is
"unset" and any other value is a length.

ok tb@

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libssl/tls13_lib.c b/src/lib/libssl/tls13_lib.c
index 3825707d5c..ad78d5b597 100644
--- a/src/lib/libssl/tls13_lib.c
+++ b/src/lib/libssl/tls13_lib.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: tls13_lib.c,v 1.38 2020/05/09 15:30:21 jsing Exp $ */
+/*      $OpenBSD: tls13_lib.c,v 1.39 2020/05/10 14:03:14 jsing Exp $ */
 /*
  * Copyright (c) 2018, 2019 Joel Sing <jsing@openbsd.org>
  * Copyright (c) 2019 Bob Beck <beck@openbsd.org>
@@ -170,7 +170,7 @@ tls13_legacy_ocsp_status_recv_cb(void *arg)
         int ret;
 
         if (s->ctx->internal->tlsext_status_cb == NULL ||
-            s->internal->tlsext_ocsp_resplen == 0)
+            s->internal->tlsext_ocsp_resplen == -1)
                 return 1;
 
         ret = s->ctx->internal->tlsext_status_cb(s,