diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/libcrypto/ocsp/ocsp_vfy.c | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/lib/libcrypto/ocsp/ocsp_vfy.c b/src/lib/libcrypto/ocsp/ocsp_vfy.c index 67d45605ff..0ba906efb1 100644 --- a/src/lib/libcrypto/ocsp/ocsp_vfy.c +++ b/src/lib/libcrypto/ocsp/ocsp_vfy.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ocsp_vfy.c,v 1.17 2021/11/01 20:53:08 tb Exp $ */ | 1 | /* $OpenBSD: ocsp_vfy.c,v 1.18 2021/11/24 19:29:19 tb Exp $ */ |
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
| 3 | * project 2000. | 3 | * project 2000. |
| 4 | */ | 4 | */ |
| @@ -96,10 +96,9 @@ OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs, X509_STORE *st, | |||
| 96 | if (!(flags & OCSP_NOSIGS)) { | 96 | if (!(flags & OCSP_NOSIGS)) { |
| 97 | EVP_PKEY *skey; | 97 | EVP_PKEY *skey; |
| 98 | 98 | ||
| 99 | skey = X509_get_pubkey(signer); | 99 | skey = X509_get0_pubkey(signer); |
| 100 | if (skey) { | 100 | if (skey) { |
| 101 | ret = OCSP_BASICRESP_verify(bs, skey, 0); | 101 | ret = OCSP_BASICRESP_verify(bs, skey, 0); |
| 102 | EVP_PKEY_free(skey); | ||
| 103 | } | 102 | } |
| 104 | if (!skey || ret <= 0) { | 103 | if (!skey || ret <= 0) { |
| 105 | OCSPerror(OCSP_R_SIGNATURE_FAILURE); | 104 | OCSPerror(OCSP_R_SIGNATURE_FAILURE); |