From c240a6035f817bd2937ea304396fea4e7404f3ce Mon Sep 17 00:00:00 2001
From: tb <>
Date: Fri, 19 Mar 2021 18:52:14 +0000
Subject: Fix copy-paste error in previous

Found the hard way by lists y42 org via an OCSP validation failure that
in turn caused pkg_add over TLS to fail. Detailed report by sthen.

ok sthen
---
 src/lib/libcrypto/x509/x509_purp.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib')

diff --git a/src/lib/libcrypto/x509/x509_purp.c b/src/lib/libcrypto/x509/x509_purp.c
index 3b8bd6b81c..c81e043f9d 100644
--- a/src/lib/libcrypto/x509/x509_purp.c
+++ b/src/lib/libcrypto/x509/x509_purp.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_purp.c,v 1.3 2021/03/13 23:01:49 tobhe Exp $ */
+/* $OpenBSD: x509_purp.c,v 1.4 2021/03/19 18:52:14 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 2001.
  */
@@ -571,7 +571,7 @@ x509v3_cache_extensions(X509 *x)
 	if (x->skid == NULL && i != -1)
 		x->ex_flags |= EXFLAG_INVALID;
 	x->akid = X509_get_ext_d2i(x, NID_authority_key_identifier, &i, NULL);
-	if (x->skid == NULL && i != -1)
+	if (x->akid == NULL && i != -1)
 		x->ex_flags |= EXFLAG_INVALID;
 
 	/* Does subject name match issuer? */
-- 
cgit v1.2.3-55-g6feb