Security framework.

[openssl.git] / ssl / s2_srvr.c

diff --git a/ssl/s2_srvr.c b/ssl/s2_srvr.c
index a16c33a65f8b68b35f3b8bfb7c0ccebbbb887a90..71f677bbec5dfe4343f2450371cceaa5f8e9fdef 100644 (file)
--- a/ssl/s2_srvr.c
+++ b/ssl/s2_srvr.c
@@ -1053,6 +1053,12 @@ static int request_certificate(SSL *s)
 
        i=ssl_verify_cert_chain(s,sk);
 
+       if (i > 1)
+               {
+               SSLerr(SSL_F_REQUEST_CERTIFICATE, i);
+               goto msg_end;
+               }
+
        if (i > 0)      /* we like the packet, now check the chksum */
                {
                EVP_MD_CTX ctx;