Hi,
There is clearly an error, but the recommendation to remove the return is wrong.
The 2 x "return" comes from the fact that the an IF()- check has been
lost during a merge
ctx->verify_cb might be NULL and should be checked.
Code from older version (0.9.6j)
static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
{
...
ctx->current_issuer = issuer;
if (ctx->verify_cb) //<- RE-ADD THIS CHECK TO CURRENT VERSION.
return ctx->verify_cb(0, ctx);
return 0;
}
BR
Peter
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
