Updatde from stable branch.

[thirdparty/openssl.git] / apps / x509.c

diff --git a/apps/x509.c b/apps/x509.c
index e08fdac8b935c64f71e1b9e95e0a2dce80894dd9..f1b1c6f7b6a14a6a7f6332de107d61e4551c71e9 100644 (file)
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -1130,7 +1130,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
        /* NOTE: this certificate can/should be self signed, unless it was
         * a certificate request in which case it is not. */
        X509_STORE_CTX_set_cert(&xsc,x);
-       if (!reqfile && !X509_verify_cert(&xsc))
+       if (!reqfile && X509_verify_cert(&xsc) <= 0)
                goto end;
 
        if (!X509_check_private_key(xca,pkey))