mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-31 19:24:42 +02:00
fixes CA matching when using NO_SKID
This commit is contained in:
@@ -9690,7 +9690,13 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex,
|
||||
}
|
||||
}
|
||||
else {
|
||||
Signer* ca = GetCA(cm, resp->issuerKeyHash);
|
||||
Signer* ca = NULL;
|
||||
|
||||
#ifndef NO_SKID
|
||||
ca = GetCA(cm, resp->issuerKeyHash);
|
||||
#else
|
||||
ca = GetCA(cm, resp->issuerHash);
|
||||
#endif
|
||||
|
||||
if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
|
||||
ca->publicKey, ca->pubKeySize, ca->keyOID,
|
||||
|
Reference in New Issue
Block a user