Fix the OCSP responder mode
authorMatt Caswell <matt@openssl.org>
Tue, 20 Mar 2018 11:16:39 +0000 (11:16 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 20 Mar 2018 15:53:05 +0000 (15:53 +0000)
Broken by commit 3e3c7c36.

Fixes #5681

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/5688)

apps/ocsp.c

index ed2281a..7581531 100644 (file)
@@ -551,7 +551,7 @@ int ocsp_main(int argc, char **argv)
     }
 
     if (ridx_filename != NULL
-        && (rkey != NULL || rsigner != NULL || rca_cert != NULL)) {
+        && (rkey == NULL || rsigner == NULL || rca_cert == NULL)) {
         BIO_printf(bio_err,
                    "Responder mode requires certificate, key, and CA.\n");
         goto end;