From f2ea0785ee8a25be64e17237a3327fb8eee6887f Mon Sep 17 00:00:00 2001 From: "Alan T. DeKok" Date: Wed, 21 Sep 2016 09:38:50 -0400 Subject: [PATCH] Use conf->ocsp_store, as it is always set. Which helps with RadSec connections --- src/main/tls.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/tls.c b/src/main/tls.c index 4f36a063723..c9ef1840483 100644 --- a/src/main/tls.c +++ b/src/main/tls.c @@ -1921,7 +1921,7 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx) identity = (char **)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_IDENTITY); #ifdef HAVE_OPENSSL_OCSP_H - ocsp_store = (X509_STORE *)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_STORE); + ocsp_store = conf->ocsp_store; #endif talloc_ctx = SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_TALLOC); -- 2.47.3