Small OCSP fixup
authorRichard Levitte <levitte@openssl.org>
Sat, 16 Apr 2016 10:57:09 +0000 (12:57 +0200)
committerRichard Levitte <levitte@openssl.org>
Sat, 16 Apr 2016 10:57:09 +0000 (12:57 +0200)
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>
crypto/ocsp/ocsp_vfy.c

index aba623c..16931ca 100644 (file)
@@ -151,7 +151,7 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
 
         /* If fatal error or valid match then finish */
         if (ret != 0)
-            goto err;
+            goto end;
 
         /*
          * Easy case: explicitly trusted. Get root CA and check for explicit
@@ -166,8 +166,8 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
             goto err;
         }
         ret = 1;
-        goto end;
     }
+    goto end;
 
  err:
     ret = 0;