handle OCSP verified certificate which is already loaded as CA

This commit is contained in:
Tesfa Mael
2019-04-25 10:51:42 -07:00
parent fdabe614f8
commit 45703a8d72

View File

@ -8137,8 +8137,10 @@ int ParseCertRelative(DecodedCert* cert, int type, int verify, void* cm)
#ifndef NO_SKID
if (cert->extAuthKeyIdSet)
cert->ca = GetCA(cm, cert->extAuthKeyId);
if (cert->ca == NULL && cert->extSubjKeyIdSet)
if (cert->ca == NULL && cert->extSubjKeyIdSet \
&& verify != VERIFY_OCSP) {
cert->ca = GetCA(cm, cert->extSubjKeyId);
}
if (cert->ca == NULL)
cert->ca = GetCAByName(cm, cert->issuerHash);