From f7ae781b37f3620a038eba9d1153f1808d93bb88 Mon Sep 17 00:00:00 2001 From: Alessandro Ghedini Date: Fri, 20 Mar 2015 13:24:08 +0100 Subject: [PATCH] openssl: try to avoid accessing OCSP structs when possible --- lib/vtls/openssl.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index f0c97f0..3f93e22 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -1390,17 +1390,15 @@ static CURLcode verifystatus(struct connectdata *conn, goto end; } - for(i = 0; i < sk_OCSP_SINGLERESP_num(br->tbsResponseData->responses); i++) { + for(i = 0; i < OCSP_resp_count(br); i++) { int cert_status, crl_reason; OCSP_SINGLERESP *single = NULL; ASN1_GENERALIZEDTIME *rev, *thisupd, *nextupd; - if(!sk_OCSP_SINGLERESP_value(br->tbsResponseData->responses, i)) + if(!(single = OCSP_resp_get0(br, i))) continue; - single = sk_OCSP_SINGLERESP_value(br->tbsResponseData->responses, i); - cert_status = OCSP_single_get0_status(single, &crl_reason, &rev, &thisupd, &nextupd); -- 2.1.4