From: Christos Tsantilas <chtsanti@users.sourceforge.net>
Date: Thu, 5 Nov 2015 17:41:07 +0000 (+0200)
Subject: The X509_check_issued is wrongly used in findCertByIssuerSlowly function.
X-Git-Tag: SQUID_4_0_13~5^2~23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d0886f009b0b4f2bb51273847250eb5836d9d468;p=thirdparty%2Fsquid.git

The X509_check_issued is wrongly used in findCertByIssuerSlowly function.
---

diff --git a/src/ssl/support.cc b/src/ssl/support.cc
index 6bc7dd426f..5e314e0599 100644
--- a/src/ssl/support.cc
+++ b/src/ssl/support.cc
@@ -1201,7 +1201,7 @@ findCertByIssuerSlowly(STACK_OF(X509) *sk, X509 *cert)
     const int skItemsNum = sk_X509_num(sk);
     for (int i = 0; i < skItemsNum; ++i) {
         X509 *issuer = sk_X509_value(sk, i);
-        if (X509_check_issued(cert, issuer) == X509_V_OK)
+        if (X509_check_issued(issuer, cert) == X509_V_OK)
             return issuer;
     }
     return NULL;