- Fix #627: SSL_CTX_load_verify_locations return code not properly

  checked.

git-svn-id: file:///svn/unbound/trunk@3271 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index f78f9202d6617f8845b1ba631f89a33d014863f7..52232bd30140a985a8de28a677ee5597f10f9127 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+17 November 2014: Wouter
+       - Fix #627: SSL_CTX_load_verify_locations return code not properly
+         checked.
+
 14 November 2014: Wouter
        - parser with bison 2.7
 

diff --git a/util/net_help.c b/util/net_help.c
index 49ce677f4aa06c5f3bf06230e393ed1b3836876b..8c2bac7372fc77404f8f59fbb3a972cac17e186b 100644 (file)
--- a/util/net_help.c
+++ b/util/net_help.c
@@ -699,7 +699,7 @@ void* connect_sslctx_create(char* key, char* pem, char* verifypem)
                }
        }
        if(verifypem && verifypem[0]) {
-               if(!SSL_CTX_load_verify_locations(ctx, verifypem, NULL) != 1) {
+               if(!SSL_CTX_load_verify_locations(ctx, verifypem, NULL)) {
                        log_crypto_err("error in SSL_CTX verify");
                        SSL_CTX_free(ctx);
                        return NULL;