diff options
Diffstat (limited to 'src/lib/libcrypto/ocsp')
| -rw-r--r-- | src/lib/libcrypto/ocsp/ocsp_vfy.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/lib/libcrypto/ocsp/ocsp_vfy.c b/src/lib/libcrypto/ocsp/ocsp_vfy.c index d197fe4ea7..27d2283ea7 100644 --- a/src/lib/libcrypto/ocsp/ocsp_vfy.c +++ b/src/lib/libcrypto/ocsp/ocsp_vfy.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ocsp_vfy.c,v 1.23 2023/07/08 10:44:00 beck Exp $ */ | 1 | /* $OpenBSD: ocsp_vfy.c,v 1.24 2024/07/12 18:15:10 beck Exp $ */ |
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
| 3 | * project 2000. | 3 | * project 2000. |
| 4 | */ | 4 | */ |
| @@ -168,8 +168,8 @@ OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs, X509_STORE *st, | |||
| 168 | goto end; | 168 | goto end; |
| 169 | 169 | ||
| 170 | x = sk_X509_value(chain, sk_X509_num(chain) - 1); | 170 | x = sk_X509_value(chain, sk_X509_num(chain) - 1); |
| 171 | if (X509_check_trust(x, NID_OCSP_sign, 0) != | 171 | if (X509_check_trust(x, X509_TRUST_OCSP_SIGN, 0) != |
| 172 | X509_TRUST_TRUSTED) { | 172 | X509_TRUST_TRUSTED) { |
| 173 | OCSPerror(OCSP_R_ROOT_CA_NOT_TRUSTED); | 173 | OCSPerror(OCSP_R_ROOT_CA_NOT_TRUSTED); |
| 174 | goto end; | 174 | goto end; |
| 175 | } | 175 | } |
