Fix verify loop with CRL checking.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 12 Jul 2013 16:35:08 +0000 (17:35 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Tue, 6 Aug 2013 15:08:09 +0000 (16:08 +0100)
commit7cf0529b52dca16bbfeca39e433402867303814c
treefc90d98197a4886aae4b0077528c9fdf7525ed13
parent6c03af135b285429a71ab3dac953ad9a70d8a1ac
Fix verify loop with CRL checking.

PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
(cherry picked from commit 4b26645c1a71cf9ce489e4f79fc836760b670ffe)
crypto/x509/x509_vfy.c