Change mapping of openssl errors to lm ssl errors
authorMyhailo Danylenko <isbear@ukrpost.net>
Tue, 20 Nov 2012 23:35:05 +0200
changeset 645 b6f59df1fbaa
parent 644 4fc5eab77197
child 646 881b49e81207
Change mapping of openssl errors to lm ssl errors
loudmouth/lm-ssl-openssl.c
--- a/loudmouth/lm-ssl-openssl.c	Tue Nov 20 03:09:30 2012 +0200
+++ b/loudmouth/lm-ssl-openssl.c	Tue Nov 20 23:35:05 2012 +0200
@@ -156,17 +156,17 @@
     switch (verify_res) {
     case X509_V_OK:
         break;
-    case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT:
-        /* special case for self signed certificates? */
     case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT:
     case X509_V_ERR_UNABLE_TO_GET_CRL:
-    case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE:
         if (base->func(ssl,
                        LM_SSL_STATUS_NO_CERT_FOUND,
                        base->func_data) != LM_SSL_RESPONSE_CONTINUE) {
             retval = FALSE;
         }
         break;
+    case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT:
+        /* special case for self signed certificates? */
+    case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE:
     case X509_V_ERR_INVALID_CA:
     case X509_V_ERR_CERT_UNTRUSTED:
     case X509_V_ERR_CERT_REVOKED: