From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 4 Jun 2003 00:40:05 +0000 (+0000)
Subject: Really get X509_CRL_CHECK_ALL right this time...
X-Git-Tag: BEN_FIPS_TEST_1~38^2~78
X-Git-Url: https://git.openssl.org/?a=commitdiff_plain;ds=sidebyside;h=50078051bd1c63b04ff4842965081eb65db0421e;p=openssl.git

Really get X509_CRL_CHECK_ALL right this time...
---

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 552d1e7251..f60054bd39 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -453,9 +453,9 @@ static int check_revocation(X509_STORE_CTX *ctx)
 	if (!(ctx->flags & X509_V_FLAG_CRL_CHECK))
 		return 1;
 	if (ctx->flags & X509_V_FLAG_CRL_CHECK_ALL)
-		last = 0;
-	else
 		last = sk_X509_num(ctx->chain) - 1;
+	else
+		last = 0;
 	for(i = 0; i <= last; i++)
 		{
 		ctx->error_depth = i;