From 1d9a49ee3cbfe6b7022d3e7a52212ff051023cf8 Mon Sep 17 00:00:00 2001
From: jsg <jsg@openbsd.org>
Date: Sun, 3 Aug 2014 14:35:30 +0000
Subject: [PATCH] X509_NAME_get_text_by_NID() returns -1 on error so the type
 the return value is stored in must be signed.  Fixes a test for error.

ok jsing@ guenther@
---
 lib/libressl/ressl_verify.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/libressl/ressl_verify.c b/lib/libressl/ressl_verify.c
index e98a264f4f7..0942f7e2304 100644
--- a/lib/libressl/ressl_verify.c
+++ b/lib/libressl/ressl_verify.c
@@ -143,7 +143,7 @@ ressl_check_common_name(X509 *cert, const char *host)
 {
 	X509_NAME *name;
 	char *common_name = NULL;
-	size_t common_name_len;
+	int common_name_len;
 	int rv = -1;
 
 	name = X509_get_subject_name(cert);
-- 
2.20.1