fixed stupid bug in fetch_ocsp()

diff --git a/src/charon/credentials/credential_manager.c b/src/charon/credentials/credential_manager.c
index a3235bd04a90e4e5f98a1ec382615fd771b0dacb..7b16c521c308a38bdbfac9138ec922a0ee2da636 100644 (file)
--- a/src/charon/credentials/credential_manager.c
+++ b/src/charon/credentials/credential_manager.c
@@ -476,7 +476,7 @@ static certificate_t *fetch_ocsp(private_credential_manager_t *this, char *url,
                issuer_cert->destroy(issuer_cert);
                DBG1(DBG_CFG, "  ocsp response is %strusted: %s signature",
                                                 ok ? "":"un", ok ? "good" : "bad");
-               if (ok)
+               if (!ok)
                {
                        response->destroy(response);
                        return NULL;