From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Thu, 30 Oct 2003 14:40:00 +0000 (+0000)
Subject: corrected some bugs in the verification functions.
X-Git-Tag: gnutls_0_9_95~29
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2b3d7c7e1455b8b02f02be382fa82c44f2790243;p=thirdparty%2Fgnutls.git

corrected some bugs in the verification functions.
---

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 9dbb8c3087..f102f372c3 100644
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -247,6 +247,8 @@ int ret, issuer_version, result;
 	ret = _gnutls_x509_verify_signature(&cert_signed_data, &cert_signature, issuer);
 	if (ret < 0) {
 		gnutls_assert();
+	} else if (ret == 0) {
+		gnutls_assert();
 		/* error. ignore it */
 		if (output) *output |= GNUTLS_CERT_NOT_TRUSTED;
 		ret = 0;
@@ -765,7 +767,7 @@ int ret, result;
 
 
 	ret = _gnutls_x509_verify_signature(&crl_signed_data, &crl_signature, issuer);
-	if (ret < 0) {
+	if (ret <= 0) {
 		gnutls_assert();
 		/* error. ignore it */
 		ret = 0;