diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c index f869fa584..5a0e2c64c 100644 --- a/wolfcrypt/src/asn.c +++ b/wolfcrypt/src/asn.c @@ -8137,8 +8137,10 @@ int ParseCertRelative(DecodedCert* cert, int type, int verify, void* cm) #ifndef NO_SKID if (cert->extAuthKeyIdSet) cert->ca = GetCA(cm, cert->extAuthKeyId); - if (cert->ca == NULL && cert->extSubjKeyIdSet) + if (cert->ca == NULL && cert->extSubjKeyIdSet \ + && verify != VERIFY_OCSP) { cert->ca = GetCA(cm, cert->extSubjKeyId); + } if (cert->ca == NULL) cert->ca = GetCAByName(cm, cert->issuerHash);