Fix invalid policy detection
authorViktor Dukhovni <openssl-users@dukhovni.org>
Fri, 29 Jan 2016 21:38:21 +0000 (16:38 -0500)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Fri, 29 Jan 2016 22:00:40 +0000 (17:00 -0500)
commitbc8c34d74ad26dca410f919b928db534b846d65f
tree9c2ceb3157ef6f88db36a5d302a81b7a37f7c638
parentced2c2c598e195175950a67756d426052d38c228
Fix invalid policy detection

As a side-effect of opaque x509, ex_flags were looked up too early,
before additional policy cache updates.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
crypto/x509v3/pcy_tree.c