From 5164c152162a041ca051a81da8a27c9f8a50e71d Mon Sep 17 00:00:00 2001
From: John Safranek <jasaf@mac.com>
Date: Thu, 20 Dec 2012 15:29:15 -0800
Subject: [PATCH] fixed missed initialization when not using ocsp nonces

---
 ctaocrypt/src/asn.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ctaocrypt/src/asn.c b/ctaocrypt/src/asn.c
index 1c928cf0b..785e49e50 100644
--- a/ctaocrypt/src/asn.c
+++ b/ctaocrypt/src/asn.c
@@ -4650,11 +4650,11 @@ int EncodeOcspRequest(OcspRequest* req)
     req->serialSz = req->cert->serialSz;
     snSz = SetSerialNumber(req->cert->serial, req->cert->serialSz, snArray);
 
+    extSz = 0;
     if (req->useNonce) {
         RNG rng;
         if (InitRng(&rng) != 0) {
             CYASSL_MSG("\tCannot initialize RNG. Skipping the OSCP Nonce.");
-            extSz = 0;
         } else {
             req->nonceSz = MAX_OCSP_NONCE_SZ;
             RNG_GenerateBlock(&rng, req->nonce, req->nonceSz);