Fix for SSL_get_certificate
authorDr. Stephen Henson <steve@openssl.org>
Mon, 11 Feb 2013 18:24:03 +0000 (18:24 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Mon, 11 Feb 2013 18:26:33 +0000 (18:26 +0000)
Now we set the current certificate to the one used by a server
there is no need to call ssl_get_server_send_cert which will
fail if we haven't sent a certificate yet.
(cherry picked from commit 147dbb2fe3bead7a10e2f280261b661ce7af7adc)

ssl/ssl_lib.c

index 25573e43e294b384216a8c0d52ecda823ac790d4..b3c21ea068e6e76b127f1e90dc8e87a917fb407a 100644 (file)
@@ -2601,9 +2601,7 @@ void ssl_clear_cipher_ctx(SSL *s)
 /* Fix this function so that it takes an optional type parameter */
 X509 *SSL_get_certificate(const SSL *s)
        {
-       if (s->server)
-               return(ssl_get_server_send_cert(s));
-       else if (s->cert != NULL)
+       if (s->cert != NULL)
                return(s->cert->key->x509);
        else
                return(NULL);