From e99543f8052bcb28e5e1ec9223f46e1ea93affc4 Mon Sep 17 00:00:00 2001
From: itojun <itojun@NetBSD.org>
Date: Mon, 6 Aug 2001 08:17:40 +0000
Subject: [PATCH] validate certs correctly.  sync with kame

---
 crypto/dist/kame/racoon/oakley.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/crypto/dist/kame/racoon/oakley.c b/crypto/dist/kame/racoon/oakley.c
index 670f37daf296..d7cc42f6ff33 100644
--- a/crypto/dist/kame/racoon/oakley.c
+++ b/crypto/dist/kame/racoon/oakley.c
@@ -1,4 +1,4 @@
-/*	$KAME: oakley.c,v 1.86 2001/07/17 05:02:50 sakane Exp $	*/
+/*	$KAME: oakley.c,v 1.87 2001/08/06 08:13:43 sakane Exp $	*/
 
 /*
  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@@ -1283,7 +1283,8 @@ oakley_validate_auth(iph1)
 		}
 
 		/* compare ID payload and certificate name */
-		if (iph1->rmconf->verify_cert && oakley_check_certid(iph1))
+		if (iph1->rmconf->verify_cert &&
+		    (error = oakley_check_certid(iph1)) != 0)
 			return error;
 
 		/* verify certificate */