Move allow_proxy_certs declaration to start of function.

[openssl.git] / crypto / x509 / x509_vfy.c

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 3da2490fea29934f4acb37e8355b31c7b48c3bd8..6fdc35a617922663d553ea384c75028163fac390 100644 (file)
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -390,8 +390,8 @@ static int check_chain_extensions(X509_STORE_CTX *ctx)
        X509 *x;
        int (*cb)(int ok,X509_STORE_CTX *ctx);
        int proxy_path_length = 0;
-       cb=ctx->verify_cb;
        int allow_proxy_certs = !!(ctx->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);
+       cb=ctx->verify_cb;
 
        /* must_be_ca can have 1 of 3 values:
           -1: we accept both CA and non-CA certificates, to allow direct