From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Fri, 2 Nov 2012 12:01:08 +0000 (+0100)
Subject: small optimization in CRL check
X-Git-Tag: gnutls_3_1_4~45
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5b4bd9afeac9eaf9b2caa235196517bf0720ec5d;p=thirdparty%2Fgnutls.git

small optimization in CRL check
---

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 0f3e625f2d..0a61869cdf 100644
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -989,7 +989,7 @@ _gnutls_verify_crl2 (gnutls_x509_crl_t crl,
 /* CRL is ignored for now */
   gnutls_datum_t crl_signed_data = { NULL, 0 };
   gnutls_datum_t crl_signature = { NULL, 0 };
-  gnutls_x509_crt_t issuer;
+  gnutls_x509_crt_t issuer = NULL;
   int result, hash_algo;
   time_t now = gnutls_time(0);
   unsigned int usage;
@@ -999,13 +999,6 @@ _gnutls_verify_crl2 (gnutls_x509_crl_t crl,
 
   if (tcas_size >= 1)
     issuer = find_crl_issuer (crl, trusted_cas, tcas_size);
-  else
-    {
-      gnutls_assert ();
-      if (output)
-        *output |= GNUTLS_CERT_SIGNER_NOT_FOUND | GNUTLS_CERT_INVALID;
-      return 0;
-    }
 
   /* issuer is not in trusted certificate
    * authorities.