corrected some bugs in the verification functions.

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 9dbb8c308799bb3189aaafc6c6c5e0be9d03ec1c..f102f372c3743140d171e37c99e6a348dd3f983f 100644 (file)
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -247,6 +247,8 @@ int ret, issuer_version, result;
        ret = _gnutls_x509_verify_signature(&cert_signed_data, &cert_signature, issuer);
        if (ret < 0) {
                gnutls_assert();
+       } else if (ret == 0) {
+               gnutls_assert();
                /* error. ignore it */
                if (output) *output |= GNUTLS_CERT_NOT_TRUSTED;
                ret = 0;
@@ -765,7 +767,7 @@ int ret, result;
 
 
        ret = _gnutls_x509_verify_signature(&crl_signed_data, &crl_signature, issuer);
-       if (ret < 0) {
+       if (ret <= 0) {
                gnutls_assert();
                /* error. ignore it */
                ret = 0;