Fix from HEAD.
authorDr. Stephen Henson <steve@openssl.org>
Mon, 7 Apr 2008 11:01:43 +0000 (11:01 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Mon, 7 Apr 2008 11:01:43 +0000 (11:01 +0000)
crypto/cms/cms_smime.c

index 41b8ebb4a3540b004c6748c1142f8aeea227ed56..06dd8995ec1d952cca2cd84c8ccb5abdad65fdee 100644 (file)
@@ -342,7 +342,8 @@ int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
        if (!(flags & CMS_NO_SIGNER_CERT_VERIFY))
                {
                cms_certs = CMS_get1_certs(cms);
-               crls = CMS_get1_crls(cms);
+               if (!(flags & CMS_NOCRL))
+                       crls = CMS_get1_crls(cms);
                for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++)
                        {
                        si = sk_CMS_SignerInfo_value(sinfos, i);