X-Git-Url: https://git.openssl.org/gitweb/?a=blobdiff_plain;f=crypto%2Fx509%2Fx509_trs.c;h=f0b93489d7fe8fca6550b07cb5fd5eda991e663f;hb=76c919c1a3751df1747fc67620263d663c9b7ba1;hp=c164badbe4b6c782ecf6b53d937e6b06a0c1f767;hpb=98405f240be550ff3c15a8f54cdf79c5580c371f;p=openssl.git

diff --git a/crypto/x509/x509_trs.c b/crypto/x509/x509_trs.c
index c164badbe4..f0b93489d7 100644
--- a/crypto/x509/x509_trs.c
+++ b/crypto/x509/x509_trs.c
@@ -241,7 +241,8 @@ int X509_TRUST_get_trust(X509_TRUST *xp)
 
 static int trust_1oidany(X509_TRUST *trust, X509 *x, int flags)
 {
-	if(x->aux) return obj_trust(trust->arg1, x, flags);
+	if(x->aux && (x->aux->trust || x->aux->reject))
+		return obj_trust(trust->arg1, x, flags);
 	/* we don't have any trust settings: for compatibility
 	 * we return trusted if it is self signed
 	 */