Use conf->ocsp_store, as it is always set.

Which helps with RadSec connections

diff --git a/src/main/tls.c b/src/main/tls.c
index 4f36a0637236c78fe3bb6d51e1e61087d397e7b0..c9ef184048357c435bcdfaa814a898d2dffd6322 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1921,7 +1921,7 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
 
        identity = (char **)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_IDENTITY);
 #ifdef HAVE_OPENSSL_OCSP_H
-       ocsp_store = (X509_STORE *)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_STORE);
+       ocsp_store = conf->ocsp_store;
 #endif
 
        talloc_ctx = SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_TALLOC);