Hi,

>From the code:
http://cvs.openssl.org/fileview?f=openssl/crypto/ocsp/ocsp_cl.c&v=1.5.4.1

Can the 'sig' be removed as far as it is not used anywhere ?
if (!(req->optionalSignature = sig = OCSP_SIGNATURE_new())) goto err;
(also sig declaration removal)

I do not see any reason for keeping that there.

Please englighten me if I am mistaken about it and thank you in advance ! :-)

Best Regards,
Laszlo Papp

--- ../tmp/openssl-SNAP-20110407/crypto/ocsp/ocsp_cl.c  2007-12-04 
15:00:20.000000000 +0200
+++ crypto/ocsp/ocsp_cl.c       2011-04-07 17:05:33.713336268 +0300
@@ -148,13 +148,12 @@
                      unsigned long flags)
         {
        int i;
-       OCSP_SIGNATURE *sig;
        X509 *x;
 
        if (!OCSP_request_set1_name(req, X509_get_subject_name(signer)))
                        goto err;
 
-       if (!(req->optionalSignature = sig = OCSP_SIGNATURE_new())) goto err;
+       if (!(req->optionalSignature = OCSP_SIGNATURE_new())) goto err;
        if (key)
                {
                if (!X509_check_private_key(signer, key))

Reply via email to