Merge pull request #694 from moisesguimaraes/fixes-ocsp-nonce-check

removes request->nonceSz check to fully validate response->nonce.
This commit is contained in:
John Safranek
2017-01-03 13:04:24 -08:00
committed by GitHub

View File

@@ -9983,7 +9983,7 @@ int CompareOcspReqResp(OcspRequest* req, OcspResponse* resp)
/* Nonces are not critical. The responder may not necessarily add
* the nonce to the response. */
if (req->nonceSz && resp->nonceSz != 0) {
if (resp->nonceSz != 0) {
cmp = req->nonceSz - resp->nonceSz;
if (cmp != 0)
{