diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-06 18:24:28 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-06 18:24:28 +0000 |
| commit | abd2ed012b37e624b241f5ab8fd8442140106fd6 (patch) | |
| tree | 80a6200c3e3f2fb430cc98d791b3f7e1c5ccf607 /crypto/x509v3/v3_purp.c | |
| parent | 3bf15e2974f416cb970ef54fae0f600ec299000e (diff) | |
| download | openssl-abd2ed012b37e624b241f5ab8fd8442140106fd6.zip openssl-abd2ed012b37e624b241f5ab8fd8442140106fd6.tar.gz openssl-abd2ed012b37e624b241f5ab8fd8442140106fd6.tar.bz2 | |
Fix two bugs which affect delta CRL handling:
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
Diffstat (limited to 'crypto/x509v3/v3_purp.c')
| -rw-r--r-- | crypto/x509v3/v3_purp.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c index 4b986df..6c40c7d 100644 --- a/crypto/x509v3/v3_purp.c +++ b/crypto/x509v3/v3_purp.c @@ -483,11 +483,11 @@ static void x509v3_cache_extensions(X509 *x) for (i = 0; i < X509_get_ext_count(x); i++) { ex = X509_get_ext(x, i); - if (!X509_EXTENSION_get_critical(ex)) - continue; if (OBJ_obj2nid(X509_EXTENSION_get_object(ex)) == NID_freshest_crl) x->ex_flags |= EXFLAG_FRESHEST; + if (!X509_EXTENSION_get_critical(ex)) + continue; if (!X509_supported_extension(ex)) { x->ex_flags |= EXFLAG_CRITICAL; |