Small OCSP fixup

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>

diff --git a/crypto/ocsp/ocsp_vfy.c b/crypto/ocsp/ocsp_vfy.c
index aba623c798de28564280db80cc3e898c5523dfc7..16931caf2e0465b985b2cde4af6c3584dc2fa6dc 100644 (file)
--- a/crypto/ocsp/ocsp_vfy.c
+++ b/crypto/ocsp/ocsp_vfy.c
@@ -151,7 +151,7 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
 
         /* If fatal error or valid match then finish */
         if (ret != 0)
-            goto err;
+            goto end;
 
         /*
          * Easy case: explicitly trusted. Get root CA and check for explicit
@@ -166,8 +166,8 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
             goto err;
         }
         ret = 1;
-        goto end;
     }
+    goto end;
 
  err:
     ret = 0;