From fcfbfe403039e4f67b8cbb30e7cf3950b7a50777 Mon Sep 17 00:00:00 2001 From: Wouter Wijngaards Date: Mon, 17 Nov 2014 08:10:49 +0000 Subject: [PATCH] - Fix #627: SSL_CTX_load_verify_locations return code not properly checked. git-svn-id: file:///svn/unbound/trunk@3271 be551aaa-1e26-0410-a405-d3ace91eadb9 --- doc/Changelog | 4 ++++ util/net_help.c | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/Changelog b/doc/Changelog index f78f9202d..52232bd30 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,7 @@ +17 November 2014: Wouter + - Fix #627: SSL_CTX_load_verify_locations return code not properly + checked. + 14 November 2014: Wouter - parser with bison 2.7 diff --git a/util/net_help.c b/util/net_help.c index 49ce677f4..8c2bac737 100644 --- a/util/net_help.c +++ b/util/net_help.c @@ -699,7 +699,7 @@ void* connect_sslctx_create(char* key, char* pem, char* verifypem) } } if(verifypem && verifypem[0]) { - if(!SSL_CTX_load_verify_locations(ctx, verifypem, NULL) != 1) { + if(!SSL_CTX_load_verify_locations(ctx, verifypem, NULL)) { log_crypto_err("error in SSL_CTX verify"); SSL_CTX_free(ctx); return NULL; -- 2.47.2