forked from wolfSSL/wolfssl
fixes ocsp signer lookup in the cert manager.
This commit is contained in:
@ -9207,7 +9207,10 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex,
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
else {
|
else {
|
||||||
Signer* ca = GetCA(cm, resp->issuerHash);
|
Signer* ca = GetCA(cm, resp->issuerKeyHash);
|
||||||
|
|
||||||
|
if (!ca)
|
||||||
|
ca = GetCA(cm, resp->issuerHash);
|
||||||
|
|
||||||
if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
|
if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
|
||||||
ca->publicKey, ca->pubKeySize, ca->keyOID,
|
ca->publicKey, ca->pubKeySize, ca->keyOID,
|
||||||
|
Reference in New Issue
Block a user