From 47eca42840e793d827a928e68ef69308c66c8877 Mon Sep 17 00:00:00 2001
From: fpeters <>
Date: Wed, 8 Sep 2004 16:17:30 +0000
Subject: [PATCH] note about ocspIssuer if not found and not in config file

---
 src/auth.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/auth.c b/src/auth.c
index 0ba0070..5a6c351 100644
--- a/src/auth.c
+++ b/src/auth.c
@@ -123,6 +123,10 @@ static int ocsp_check(char *client_cert)
 	if (X509_STORE_CTX_get1_issuer(&issuer, &store_ctx, cert) != 1) {
 		fprintf(stderr,
 			"get1_issuer from cert failed; using config file\n");
+		if (get_config_string("//idpc:ocspIssuer") == NULL) {
+			fprintf(stderr, "no ocspIssuer set\n");
+			return -1;
+		}
 		fcert = fopen(get_config_string("//idpc:ocspIssuer"), "r");
 		if (!PEM_read_X509(fcert, &issuer, NULL, NULL)) {
 			fprintf(stderr, "reading issuer cert failed\n");