summaryrefslogtreecommitdiff
path: root/lib/x509/verify.c
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2003-10-30 14:40:00 +0000
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2003-10-30 14:40:00 +0000
commit2b3d7c7e1455b8b02f02be382fa82c44f2790243 (patch)
treef6444343b4ab7b1448939137d377f72359c4719e /lib/x509/verify.c
parenta451d57768ceff6f4eb54c211830ce8564606d86 (diff)
downloadgnutls-2b3d7c7e1455b8b02f02be382fa82c44f2790243.tar.gz
corrected some bugs in the verification functions.
Diffstat (limited to 'lib/x509/verify.c')
-rw-r--r--lib/x509/verify.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 9dbb8c3087..f102f372c3 100644
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -247,6 +247,8 @@ int ret, issuer_version, result;
ret = _gnutls_x509_verify_signature(&cert_signed_data, &cert_signature, issuer);
if (ret < 0) {
gnutls_assert();
+ } else if (ret == 0) {
+ gnutls_assert();
/* error. ignore it */
if (output) *output |= GNUTLS_CERT_NOT_TRUSTED;
ret = 0;
@@ -765,7 +767,7 @@ int ret, result;
ret = _gnutls_x509_verify_signature(&crl_signed_data, &crl_signature, issuer);
- if (ret < 0) {
+ if (ret <= 0) {
gnutls_assert();
/* error. ignore it */
ret = 0;