pkcs11: handle errors from override_cert_exts as fatal

diff --git a/lib/pkcs11.c b/lib/pkcs11.c
index 03385bc041c37d9881f025c6f1ebcacfe659c110..45669889da5c3e2b1e2b078d5f227a44702d7a67 100644 (file)
--- a/lib/pkcs11.c
+++ b/lib/pkcs11.c
@@ -3323,7 +3323,7 @@ find_cert_cb(struct pkcs11_session_info *sinfo,
                                                ret = pkcs11_override_cert_exts(sinfo, &spki, &data);
                                                if (ret < 0) {
                                                        gnutls_assert();
-                                                       /* non fatal error */
+                                                       goto cleanup;
                                                }
                                        }
                                }