From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Wed, 6 Mar 2013 09:54:32 +0000 (+0100)
Subject: check revocation prior to reading local certs.
X-Git-Tag: gnutls_3_1_10~48
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=8d4a968338bdedb476a9ed3c4c8983d8f75a2f31;p=thirdparty%2Fgnutls.git

check revocation prior to reading local certs.
---

diff --git a/lib/system.c b/lib/system.c
index b79bbd0856..1c73fc0531 100644
--- a/lib/system.c
+++ b/lib/system.c
@@ -540,14 +540,14 @@ int add_system_trust(gnutls_x509_trust_list_t list, unsigned int tl_flags, unsig
   if (ret >= 0)
     r += ret;
 
-  ret = load_dir_certs("/data/misc/keychain/cacerts-added/", list, tl_flags, tl_vflags, GNUTLS_X509_FMT_DER);
-  if (ret >= 0)
-    r += ret;
-    
   ret = load_revoked_certs(list, GNUTLS_X509_FMT_DER);
   if (ret >= 0)
     r -= ret;
 
+  ret = load_dir_certs("/data/misc/keychain/cacerts-added/", list, tl_flags, tl_vflags, GNUTLS_X509_FMT_DER);
+  if (ret >= 0)
+    r += ret;
+
   return r;
 }
 #else