From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 1 Sep 2016 19:33:45 +0000 (-0400)
Subject: issuer_cert may be retrieved, but not exist
X-Git-Tag: release_3_0_12~86
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=368e6420e77469250b5554ea6465fff7a3378ee8;p=thirdparty%2Ffreeradius-server.git

issuer_cert may be retrieved, but not exist
---

diff --git a/src/main/tls.c b/src/main/tls.c
index 21c276e95cf..4f36a063723 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -2195,7 +2195,8 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
 #ifdef HAVE_OPENSSL_OCSP_H
 		if (my_ok && conf->ocsp_enable){
 			RDEBUG2("Starting OCSP Request");
-			if (X509_STORE_CTX_get1_issuer(&issuer_cert, ctx, client_cert) != 1) {
+			if ((X509_STORE_CTX_get1_issuer(&issuer_cert, ctx, client_cert) != 1) ||
+			    !issuer_cert) {
 				RERROR("Couldn't get issuer_cert for %s", common_name);
 			} else {
 				my_ok = ocsp_check(request, ocsp_store, issuer_cert, client_cert, conf);