Fix verify loop with CRL checking.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 12 Jul 2013 16:35:08 +0000 (17:35 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 12 Jul 2013 16:48:41 +0000 (17:48 +0100)
commit4b26645c1a71cf9ce489e4f79fc836760b670ffe
tree715211f01fa50d369b9525a655e226ddc0c53fb3
parentc051cbc83ff13e1dee9951b10255f0b9679ba502
Fix verify loop with CRL checking.

PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
crypto/x509/x509_vfy.c