diff options
Diffstat (limited to 'src/lib/libcrypto/ocsp/ocsp_vfy.c')
-rw-r--r-- | src/lib/libcrypto/ocsp/ocsp_vfy.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/lib/libcrypto/ocsp/ocsp_vfy.c b/src/lib/libcrypto/ocsp/ocsp_vfy.c index d197fe4ea7..27d2283ea7 100644 --- a/src/lib/libcrypto/ocsp/ocsp_vfy.c +++ b/src/lib/libcrypto/ocsp/ocsp_vfy.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ocsp_vfy.c,v 1.23 2023/07/08 10:44:00 beck Exp $ */ | 1 | /* $OpenBSD: ocsp_vfy.c,v 1.24 2024/07/12 18:15:10 beck Exp $ */ |
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
3 | * project 2000. | 3 | * project 2000. |
4 | */ | 4 | */ |
@@ -168,8 +168,8 @@ OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs, X509_STORE *st, | |||
168 | goto end; | 168 | goto end; |
169 | 169 | ||
170 | x = sk_X509_value(chain, sk_X509_num(chain) - 1); | 170 | x = sk_X509_value(chain, sk_X509_num(chain) - 1); |
171 | if (X509_check_trust(x, NID_OCSP_sign, 0) != | 171 | if (X509_check_trust(x, X509_TRUST_OCSP_SIGN, 0) != |
172 | X509_TRUST_TRUSTED) { | 172 | X509_TRUST_TRUSTED) { |
173 | OCSPerror(OCSP_R_ROOT_CA_NOT_TRUSTED); | 173 | OCSPerror(OCSP_R_ROOT_CA_NOT_TRUSTED); |
174 | goto end; | 174 | goto end; |
175 | } | 175 | } |