Index: openssl/crypto/ocsp/ocsp_vfy.c |
=================================================================== |
--- openssl/crypto/ocsp/ocsp_vfy.c (revision 105093) |
+++ openssl/crypto/ocsp/ocsp_vfy.c (working copy) |
@@ -308,6 +308,8 @@ |
} |
mdlen = EVP_MD_size(dgst); |
+ if (mdlen < 0) |
+ return -1; |
if ((cid->issuerNameHash->length != mdlen) || |
(cid->issuerKeyHash->length != mdlen)) |
return 0; |
@@ -316,7 +318,7 @@ |
return -1; |
if (memcmp(md, cid->issuerNameHash->data, mdlen)) |
return 0; |
- X509_pubkey_digest(cert, EVP_sha1(), md, NULL); |
+ X509_pubkey_digest(cert, dgst, md, NULL); |
if (memcmp(md, cid->issuerKeyHash->data, mdlen)) |
return 0; |