Clean up OCSP_check_validity() a bit more.
authorbeck <beck@openbsd.org>
Sat, 16 Jul 2016 16:14:28 +0000 (16:14 +0000)
committerbeck <beck@openbsd.org>
Sat, 16 Jul 2016 16:14:28 +0000 (16:14 +0000)
commit7465f45506b6064d9ec5bdc220c782306aa866dd
tree3e4396cf157affe67d690935a6f14f70db5bd31a
parent51914d64007640868175c5e596da1bfb3bbc4edb
Clean up OCSP_check_validity() a bit more.
- Return on first failure rather than continuing.
- Don't compare times by comparing strings that possibly were not parsable as a time.
ok deraadt@
lib/libcrypto/ocsp/ocsp_cl.c
lib/libssl/src/crypto/ocsp/ocsp_cl.c