fixes ocsp signer lookup in the cert manager.

This commit is contained in:
Moisés Guimarães 2016-07-15 17:12:04 -03:00
parent c47f5f404c
commit dd329ac97b

View File

@ -9207,7 +9207,10 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex,
}
}
else {
Signer* ca = GetCA(cm, resp->issuerHash);
Signer* ca = GetCA(cm, resp->issuerKeyHash);
if (!ca)
ca = GetCA(cm, resp->issuerHash);
if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
ca->publicKey, ca->pubKeySize, ca->keyOID,