X-Git-Url: https://git.openssl.org/gitweb/?a=blobdiff_plain;f=crypto%2Fx509%2Fx509_vfy.c;h=05dcd8b0a32182cc548cd1940f9159d44242bbcc;hb=002e66c0e81f94ac01d9a206e43eabb7f1c72a74;hp=fe47dcba525dc9b375dad9f480eae2674a236cb0;hpb=e9746e03ee222b0123ac118f8952e161e7d48a2d;p=openssl.git

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index fe47dcba52..05dcd8b0a3 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1122,7 +1122,8 @@ static int check_policy(X509_STORE_CTX *ctx)
 				continue;
 			ctx->current_cert = x;
 			ctx->error = X509_V_ERR_INVALID_POLICY_EXTENSION;
-			ret = ctx->verify_cb(0, ctx);
+			if(!ctx->verify_cb(0, ctx))
+				return 0;
 			}
 		return 1;
 		}