summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPhil Pennock <pdp@exim.org>2017-02-24 22:39:02 -0500
committerPhil Pennock <pdp@exim.org>2017-02-24 22:39:02 -0500
commitd9841333e40c16d12df8190527a0ceba233f4c93 (patch)
treec49652d2354c486b70530340ca7f0e7c3e781d1d
parentea22b399e05a726b22d8638f3e5393e99bb09f22 (diff)
downloadexim4-d9841333e40c16d12df8190527a0ceba233f4c93.tar.gz
Pull in vdukhovni/ssl_dane 8270afba fix
Negating an int and comparing to another int was a bug which we got lucky on.
-rw-r--r--src/src/dane-openssl.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/src/dane-openssl.c b/src/src/dane-openssl.c
index bb927383f..97acccb5a 100644
--- a/src/src/dane-openssl.c
+++ b/src/src/dane-openssl.c
@@ -667,7 +667,7 @@ for (n = sk_X509_num(in); n > 0; --n, ++depth)
{
if (grow_chain(dane, UNTRUSTED, ca))
{
- if (!X509_check_issued(ca, ca) == X509_V_OK)
+ if (X509_check_issued(ca, ca) != X509_V_OK)
{
/* Restart with issuer as subject */
cert = ca;