Really get X509_CRL_CHECK_ALL right this time...
authorDr. Stephen Henson <steve@openssl.org>
Wed, 4 Jun 2003 00:40:05 +0000 (00:40 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 4 Jun 2003 00:40:05 +0000 (00:40 +0000)
crypto/x509/x509_vfy.c

index 552d1e7..f60054b 100644 (file)
@@ -453,9 +453,9 @@ static int check_revocation(X509_STORE_CTX *ctx)
        if (!(ctx->flags & X509_V_FLAG_CRL_CHECK))
                return 1;
        if (ctx->flags & X509_V_FLAG_CRL_CHECK_ALL)
-               last = 0;
-       else
                last = sk_X509_num(ctx->chain) - 1;
+       else
+               last = 0;
        for(i = 0; i <= last; i++)
                {
                ctx->error_depth = i;