feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

fixes CA matching when using NO_SKID

Browse Source
This commit is contained in:
Moisés Guimarães
2017-01-09 16:43:31 -02:00
parent fc8ab42612
commit 86a3039e0b
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
wolfcrypt/src/asn.c
View File

@ -9690,7 +9690,13 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex,
}
}
else {
Signer* ca = GetCA(cm, resp->issuerKeyHash);
Signer* ca = NULL;
#ifndef NO_SKID
ca = GetCA(cm, resp->issuerKeyHash);
#else
ca = GetCA(cm, resp->issuerHash);
#endif
if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
ca->publicKey, ca->pubKeySize, ca->keyOID,