diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-06 18:25:03 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-06 18:25:03 +0000 |
| commit | dd83cc298d386a4b126481219d7f3e384cbe52a1 (patch) | |
| tree | 120a5550b66de7f188e70eb745ba0ce3f8c772ac /crypto/x509v3/v3_purp.c | |
| parent | ea005985963b181486e565148ce6d7c2c187cc3d (diff) | |
| download | openssl-new-dd83cc298d386a4b126481219d7f3e384cbe52a1.tar.gz | |
Fix two bugs which affect delta CRL handling:
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
Diffstat (limited to 'crypto/x509v3/v3_purp.c')
| -rw-r--r-- | crypto/x509v3/v3_purp.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c index 181bd34979..ad688657e0 100644 --- a/crypto/x509v3/v3_purp.c +++ b/crypto/x509v3/v3_purp.c @@ -474,11 +474,11 @@ static void x509v3_cache_extensions(X509 *x) for (i = 0; i < X509_get_ext_count(x); i++) { ex = X509_get_ext(x, i); - if (!X509_EXTENSION_get_critical(ex)) - continue; if (OBJ_obj2nid(X509_EXTENSION_get_object(ex)) == NID_freshest_crl) x->ex_flags |= EXFLAG_FRESHEST; + if (!X509_EXTENSION_get_critical(ex)) + continue; if (!X509_supported_extension(ex)) { x->ex_flags |= EXFLAG_CRITICAL; |