]> git.ipfire.org Git - thirdparty/hostap.git/commitdiff
wolfSSL: Client cert loading API fix
authorJuliusz Sosinowicz <juliusz@wolfssl.com>
Wed, 21 Oct 2020 15:59:53 +0000 (17:59 +0200)
committerJouni Malinen <j@w1.fi>
Fri, 4 Dec 2020 10:42:17 +0000 (12:42 +0200)
Client cert loading API should check equality to SSL_SUCCESS for
success.

Signed-off-by: Juliusz Sosinowicz <juliusz@wolfssl.com>
src/crypto/tls_wolfssl.c

index b8a7665fd6e9ce3024ee7ceacd94d4d010c76484..ea8f7063b098659559fa4b06d52f82e97802190b 100644 (file)
@@ -469,7 +469,7 @@ static int tls_connection_client_cert(struct tls_connection *conn,
        if (client_cert_blob) {
                if (wolfSSL_use_certificate_chain_buffer_format(
                            conn->ssl, client_cert_blob, blob_len,
-                           SSL_FILETYPE_ASN1) < 0) {
+                           SSL_FILETYPE_ASN1) != SSL_SUCCESS) {
                        wpa_printf(MSG_INFO,
                                   "SSL: use client cert DER blob failed");
                        return -1;
@@ -479,13 +479,13 @@ static int tls_connection_client_cert(struct tls_connection *conn,
        }
 
        if (client_cert) {
-               if (wolfSSL_use_certificate_chain_file(conn->ssl,
-                                                      client_cert) < 0) {
+               if (wolfSSL_use_certificate_chain_file(
+                           conn->ssl, client_cert) != SSL_SUCCESS) {
                        wpa_printf(MSG_INFO,
                                   "SSL: use client cert PEM file failed");
                        if (wolfSSL_use_certificate_chain_file_format(
                                    conn->ssl, client_cert,
-                                   SSL_FILETYPE_ASN1) < 0) {
+                                   SSL_FILETYPE_ASN1) != SSL_SUCCESS) {
                                wpa_printf(MSG_INFO,
                                           "SSL: use client cert DER file failed");
                                return -1;