Merge pull request #487 from moisesguimaraes/fix-ocspstapling-getca

fixes ocsp signer lookup in the cert manager.
This commit is contained in:
John Safranek
2016-07-26 12:42:47 -07:00
committed by GitHub

View File

@@ -9225,7 +9225,7 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex,
} }
} }
else { else {
Signer* ca = GetCA(cm, resp->issuerHash); Signer* ca = GetCA(cm, resp->issuerKeyHash);
if (!ca || !ConfirmSignature(resp->response, resp->responseSz, if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
ca->publicKey, ca->pubKeySize, ca->keyOID, ca->publicKey, ca->pubKeySize, ca->keyOID,