[PATCH] wolfSSL: Client cert loading API fix

Juliusz Sosinowicz juliusz at wolfssl.com
Wed Oct 21 11:59:53 EDT 2020


Client cert loading API should check equality to SSL_SUCCESS for success.

Signed-off-by: Juliusz Sosinowicz <juliusz at wolfssl.com>
---
 src/crypto/tls_wolfssl.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/crypto/tls_wolfssl.c b/src/crypto/tls_wolfssl.c
index b8a7665fd..4a7673926 100644
--- a/src/crypto/tls_wolfssl.c
+++ b/src/crypto/tls_wolfssl.c
@@ -469,7 +469,7 @@ static int tls_connection_client_cert(struct tls_connection *conn,
 	if (client_cert_blob) {
 		if (wolfSSL_use_certificate_chain_buffer_format(
 			    conn->ssl, client_cert_blob, blob_len,
-			    SSL_FILETYPE_ASN1) < 0) {
+			    SSL_FILETYPE_ASN1) != SSL_SUCCESS) {
 			wpa_printf(MSG_INFO,
 				   "SSL: use client cert DER blob failed");
 			return -1;
@@ -480,7 +480,7 @@ static int tls_connection_client_cert(struct tls_connection *conn,
 
 	if (client_cert) {
 		if (wolfSSL_use_certificate_chain_file(conn->ssl,
-						       client_cert) < 0) {
+						       client_cert) != SSL_SUCCESS) {
 			wpa_printf(MSG_INFO,
 				   "SSL: use client cert PEM file failed");
 			if (wolfSSL_use_certificate_chain_file_format(
-- 
2.25.1




More information about the Hostap mailing list