Support for policy mappings extension.

[openssl.git] / crypto / x509 / x509_vfy.c

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index fe47dcba525dc9b375dad9f480eae2674a236cb0..05dcd8b0a32182cc548cd1940f9159d44242bbcc 100644 (file)
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1122,7 +1122,8 @@ static int check_policy(X509_STORE_CTX *ctx)
                                continue;
                        ctx->current_cert = x;
                        ctx->error = X509_V_ERR_INVALID_POLICY_EXTENSION;
-                       ret = ctx->verify_cb(0, ctx);
+                       if(!ctx->verify_cb(0, ctx))
+                               return 0;
                        }
                return 1;
                }