From: Alan T. DeKok <aland@freeradius.org>
Date: Wed, 21 Sep 2016 13:38:50 +0000 (-0400)
Subject: Use conf->ocsp_store, as it is always set.
X-Git-Tag: release_3_0_12~47
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f2ea0785ee8a25be64e17237a3327fb8eee6887f;p=thirdparty%2Ffreeradius-server.git

Use conf->ocsp_store, as it is always set.

Which helps with RadSec connections
---

diff --git a/src/main/tls.c b/src/main/tls.c
index 4f36a063723..c9ef1840483 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1921,7 +1921,7 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
 
 	identity = (char **)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_IDENTITY);
 #ifdef HAVE_OPENSSL_OCSP_H
-	ocsp_store = (X509_STORE *)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_STORE);
+	ocsp_store = conf->ocsp_store;
 #endif
 
 	talloc_ctx = SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_TALLOC);