Drop incorrect id == -1 case from X509_check_trust
authorViktor Dukhovni <openssl-users@dukhovni.org>
Tue, 29 Dec 2015 18:16:47 +0000 (13:16 -0500)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Sun, 3 Jan 2016 22:21:40 +0000 (17:21 -0500)
Reviewed-by: Richard Levitte <levitte@openssl.org>
crypto/x509/x509_trs.c

index 27ee47590dab89d09091b65e7b82d22752f13b75..8f2ff8321ed2c0e80c3fa2db7349030ae1a27fd6 100644 (file)
@@ -116,8 +116,7 @@ int X509_check_trust(X509 *x, int id, int flags)
 {
     X509_TRUST *pt;
     int idx;
-    if (id == -1)
-        return 1;
+
     /* We get this as a default value */
     if (id == 0) {
         int rv;