From: Dr. Stephen Henson Date: Mon, 24 Mar 2003 16:58:01 +0000 (+0000) Subject: Get X509_V_FLAG_CRL_CHECK_ALL logic the right way round. X-Git-Tag: OpenSSL_0_9_7b~35 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=1e2b14e9ca547cd21c6e8497a24cfb77beebf10f;p=openssl Get X509_V_FLAG_CRL_CHECK_ALL logic the right way round. PR:544 --- diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index f60054bd39..552d1e7251 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -453,9 +453,9 @@ static int check_revocation(X509_STORE_CTX *ctx) if (!(ctx->flags & X509_V_FLAG_CRL_CHECK)) return 1; if (ctx->flags & X509_V_FLAG_CRL_CHECK_ALL) - last = sk_X509_num(ctx->chain) - 1; - else last = 0; + else + last = sk_X509_num(ctx->chain) - 1; for(i = 0; i <= last; i++) { ctx->error_depth = i;