You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ds...@apache.org on 2025/10/10 09:55:05 UTC
(tomcat) branch 10.1.x updated: Make what we are expecting as errnum more obvious
This is an automated email from the ASF dual-hosted git repository.
dsoumis pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 37432a5d0a Make what we are expecting as errnum more obvious
37432a5d0a is described below
commit 37432a5d0a52786ee17808bc20fccb64cc93de50
Author: Dimitris Soumis <ji...@gmail.com>
AuthorDate: Fri Oct 10 12:53:56 2025 +0300
Make what we are expecting as errnum more obvious
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 9880a6d366..b1e7855530 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1174,7 +1174,7 @@ public final class OpenSSLEngine extends SSLEngine implements SSLUtil.ProtocolIn
X509_STORE_CTX_set_error(x509ctx, X509_V_ERR_CERT_REVOKED());
} else if (ocspResponse == V_OCSP_CERTSTATUS_UNKNOWN()) {
errnum = X509_STORE_CTX_get_error(x509ctx);
- if (errnum == X509_V_ERR_APPLICATION_VERIFICATION() || errnum < 0) {
+ if (errnum != X509_V_ERR_UNABLE_TO_GET_CRL() && (errnum == X509_V_ERR_APPLICATION_VERIFICATION() || errnum != 0)) {
ok = 0;
}
}
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org