| Index: openssl/crypto/ocsp/ocsp_vfy.c
|
| ===================================================================
|
| --- openssl/crypto/ocsp/ocsp_vfy.c (revision 105093)
|
| +++ openssl/crypto/ocsp/ocsp_vfy.c (working copy)
|
| @@ -308,6 +308,8 @@
|
| }
|
|
|
| mdlen = EVP_MD_size(dgst);
|
| + if (mdlen < 0)
|
| + return -1;
|
| if ((cid->issuerNameHash->length != mdlen) ||
|
| (cid->issuerKeyHash->length != mdlen))
|
| return 0;
|
| @@ -316,7 +318,7 @@
|
| return -1;
|
| if (memcmp(md, cid->issuerNameHash->data, mdlen))
|
| return 0;
|
| - X509_pubkey_digest(cert, EVP_sha1(), md, NULL);
|
| + X509_pubkey_digest(cert, dgst, md, NULL);
|
| if (memcmp(md, cid->issuerKeyHash->data, mdlen))
|
| return 0;
|
|
|
|
|