diff options
| -rw-r--r-- | src/libstrongswan/crypto/ca.c | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/src/libstrongswan/crypto/ca.c b/src/libstrongswan/crypto/ca.c index f437b6ba5..765bae4b4 100644 --- a/src/libstrongswan/crypto/ca.c +++ b/src/libstrongswan/crypto/ca.c @@ -386,7 +386,7 @@ static cert_status_t verify_by_crl(private_ca_info_t* this, if (this->crl == NULL) { stale = TRUE; - DBG1("crl not found"); + DBG1("crl is not locally available"); } else { @@ -449,6 +449,8 @@ static cert_status_t verify_by_crl(private_ca_info_t* this, } iterator->destroy(iterator); } + + if (this->crl) { rsa_public_key_t *issuer_public_key; bool valid_signature; @@ -461,8 +463,9 @@ static cert_status_t verify_by_crl(private_ca_info_t* this, goto ret; } DBG2("crl signature is valid"); - } - this->crl->get_status(this->crl, certinfo); + + this->crl->get_status(this->crl, certinfo); + } ret: pthread_mutex_unlock(&(this->mutex)); |