forked from wolfSSL/wolfssl
Merge pull request #4583 from dgarske/zd13242
Improve `ret` handling in the `ProcessPeerCerts` verify step.
This commit is contained in:
@ -12590,7 +12590,7 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
|
|||||||
#endif /* HAVE_OCSP */
|
#endif /* HAVE_OCSP */
|
||||||
|
|
||||||
#ifdef HAVE_CRL
|
#ifdef HAVE_CRL
|
||||||
if (doLookup && SSL_CM(ssl)->crlEnabled) {
|
if (ret == 0 && doLookup && SSL_CM(ssl)->crlEnabled) {
|
||||||
WOLFSSL_MSG("Doing Leaf CRL check");
|
WOLFSSL_MSG("Doing Leaf CRL check");
|
||||||
ret = CheckCertCRL(SSL_CM(ssl)->crl, args->dCert);
|
ret = CheckCertCRL(SSL_CM(ssl)->crl, args->dCert);
|
||||||
#ifdef WOLFSSL_NONBLOCK_OCSP
|
#ifdef WOLFSSL_NONBLOCK_OCSP
|
||||||
|
@ -4567,7 +4567,7 @@ int mp_montgomery_calc_normalization(mp_int *a, mp_int *b)
|
|||||||
return fp_montgomery_calc_normalization(a, b);
|
return fp_montgomery_calc_normalization(a, b);
|
||||||
}
|
}
|
||||||
|
|
||||||
#endif /* WOLFSSL_KEYGEN || HAVE_ECC */
|
#endif /* WOLFSSL_KEY_GEN || HAVE_ECC */
|
||||||
|
|
||||||
static int fp_cond_swap_ct (mp_int * a, mp_int * b, int c, int m)
|
static int fp_cond_swap_ct (mp_int * a, mp_int * b, int c, int m)
|
||||||
{
|
{
|
||||||
|
Reference in New Issue
Block a user