]> granicus.if.org Git - openssl/commit
Fix verify loop with CRL checking.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 12 Jul 2013 16:35:08 +0000 (17:35 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Tue, 6 Aug 2013 15:08:04 +0000 (16:08 +0100)
commit71c34b7f2d66808b21b1d341cea6f1c939d07324
tree2de0623a828c223cbd9674d7356410d9e7275b50
parentb0cfaf58adba8f6744e4deca8253395fa898c46f
Fix verify loop with CRL checking.

PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
(cherry picked from commit 4b26645c1a71cf9ce489e4f79fc836760b670ffe)
crypto/x509/x509_vfy.c