From: tb <tb@openbsd.org>
Date: Fri, 19 Mar 2021 18:52:14 +0000 (+0000)
Subject: Fix copy-paste error in previous
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=74808df388a30d1f9ebf77719194a533f9041f83;p=openbsd

Fix copy-paste error in previous

Found the hard way by lists y42 org via an OCSP validation failure that
in turn caused pkg_add over TLS to fail. Detailed report by sthen.

ok sthen
---

diff --git a/lib/libcrypto/x509/x509_purp.c b/lib/libcrypto/x509/x509_purp.c
index 3b8bd6b81c6..c81e043f9df 100644
--- a/lib/libcrypto/x509/x509_purp.c
+++ b/lib/libcrypto/x509/x509_purp.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_purp.c,v 1.3 2021/03/13 23:01:49 tobhe Exp $ */
+/* $OpenBSD: x509_purp.c,v 1.4 2021/03/19 18:52:14 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 2001.
  */
@@ -571,7 +571,7 @@ x509v3_cache_extensions(X509 *x)
 	if (x->skid == NULL && i != -1)
 		x->ex_flags |= EXFLAG_INVALID;
 	x->akid = X509_get_ext_d2i(x, NID_authority_key_identifier, &i, NULL);
-	if (x->skid == NULL && i != -1)
+	if (x->akid == NULL && i != -1)
 		x->ex_flags |= EXFLAG_INVALID;
 
 	/* Does subject name match issuer? */