Merge pull request #4583 from dgarske/zd13242

Improve `ret` handling in the `ProcessPeerCerts` verify step.
This commit is contained in:
Sean Parkinson
2021-11-19 10:22:08 +10:00
committed by GitHub
2 changed files with 2 additions and 2 deletions

View File

@ -12590,7 +12590,7 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
#endif /* HAVE_OCSP */
#ifdef HAVE_CRL
if (doLookup && SSL_CM(ssl)->crlEnabled) {
if (ret == 0 && doLookup && SSL_CM(ssl)->crlEnabled) {
WOLFSSL_MSG("Doing Leaf CRL check");
ret = CheckCertCRL(SSL_CM(ssl)->crl, args->dCert);
#ifdef WOLFSSL_NONBLOCK_OCSP

View File

@ -4567,7 +4567,7 @@ int mp_montgomery_calc_normalization(mp_int *a, mp_int *b)
return fp_montgomery_calc_normalization(a, b);
}
#endif /* WOLFSSL_KEYGEN || HAVE_ECC */
#endif /* WOLFSSL_KEY_GEN || HAVE_ECC */
static int fp_cond_swap_ct (mp_int * a, mp_int * b, int c, int m)
{