The X509_check_issued is wrongly used in findCertByIssuerSlowly function.

diff --git a/src/ssl/support.cc b/src/ssl/support.cc
index 6bc7dd426fe2eace2235ccd76ed85a16a5b19481..5e314e059948c44d936d211af966652f64568219 100644 (file)
--- a/src/ssl/support.cc
+++ b/src/ssl/support.cc
@@ -1201,7 +1201,7 @@ findCertByIssuerSlowly(STACK_OF(X509) *sk, X509 *cert)
     const int skItemsNum = sk_X509_num(sk);
     for (int i = 0; i < skItemsNum; ++i) {
         X509 *issuer = sk_X509_value(sk, i);
-        if (X509_check_issued(cert, issuer) == X509_V_OK)
+        if (X509_check_issued(issuer, cert) == X509_V_OK)
             return issuer;
     }
     return NULL;