diff options
Diffstat (limited to 'src/lib')
-rw-r--r-- | src/lib/libcrypto/ocsp/ocsp_vfy.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/lib/libcrypto/ocsp/ocsp_vfy.c b/src/lib/libcrypto/ocsp/ocsp_vfy.c index f5597d0245..0da402fd47 100644 --- a/src/lib/libcrypto/ocsp/ocsp_vfy.c +++ b/src/lib/libcrypto/ocsp/ocsp_vfy.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ocsp_vfy.c,v 1.20 2022/01/07 09:45:52 tb Exp $ */ | 1 | /* $OpenBSD: ocsp_vfy.c,v 1.21 2022/01/22 00:33:02 inoguchi Exp $ */ |
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
3 | * project 2000. | 3 | * project 2000. |
4 | */ | 4 | */ |
@@ -407,9 +407,9 @@ OCSP_request_verify(OCSP_REQUEST *req, STACK_OF(X509) *certs, X509_STORE *store, | |||
407 | if (!(flags & OCSP_NOSIGS)) { | 407 | if (!(flags & OCSP_NOSIGS)) { |
408 | EVP_PKEY *skey; | 408 | EVP_PKEY *skey; |
409 | 409 | ||
410 | skey = X509_get_pubkey(signer); | 410 | if ((skey = X509_get0_pubkey(signer)) == NULL) |
411 | return 0; | ||
411 | ret = OCSP_REQUEST_verify(req, skey); | 412 | ret = OCSP_REQUEST_verify(req, skey); |
412 | EVP_PKEY_free(skey); | ||
413 | if (ret <= 0) { | 413 | if (ret <= 0) { |
414 | OCSPerror(OCSP_R_SIGNATURE_FAILURE); | 414 | OCSPerror(OCSP_R_SIGNATURE_FAILURE); |
415 | return 0; | 415 | return 0; |