From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Mon, 17 Nov 2014 08:10:49 +0000 (+0000)
Subject: - Fix #627: SSL_CTX_load_verify_locations return code not properly
X-Git-Tag: release-1.5.1rc1~8
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fcfbfe403039e4f67b8cbb30e7cf3950b7a50777;p=thirdparty%2Funbound.git

- Fix #627: SSL_CTX_load_verify_locations return code not properly
  checked.


git-svn-id: file:///svn/unbound/trunk@3271 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/doc/Changelog b/doc/Changelog
index f78f9202d..52232bd30 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+17 November 2014: Wouter
+	- Fix #627: SSL_CTX_load_verify_locations return code not properly
+	  checked.
+
 14 November 2014: Wouter
 	- parser with bison 2.7
 
diff --git a/util/net_help.c b/util/net_help.c
index 49ce677f4..8c2bac737 100644
--- a/util/net_help.c
+++ b/util/net_help.c
@@ -699,7 +699,7 @@ void* connect_sslctx_create(char* key, char* pem, char* verifypem)
 		}
 	}
 	if(verifypem && verifypem[0]) {
-		if(!SSL_CTX_load_verify_locations(ctx, verifypem, NULL) != 1) {
+		if(!SSL_CTX_load_verify_locations(ctx, verifypem, NULL)) {
 			log_crypto_err("error in SSL_CTX verify");
 			SSL_CTX_free(ctx);
 			return NULL;