diff options
| author | Patrick McDermott <patrick.mcdermott@libiquity.com> | 2019-07-30 18:09:50 (EDT) |
|---|---|---|
| committer | Patrick McDermott <patrick.mcdermott@libiquity.com> | 2019-07-30 18:09:50 (EDT) |
| commit | 345c854cb8de688b2f2f4c2e89cc704203dafc7f (patch) | |
| tree | db7a0dbec0a6f4b3d71149795321c13604d27181 | |
| parent | 8a379e3b7428729fc5736ce702e9127c48c004f8 (diff) | |
s_client: Enable OCSP before CRL
Revocation methods are apparently used in the order in which they're
enabled.
| -rw-r--r-- | src/s_client.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/s_client.c b/src/s_client.c index 79f8f25..2d1d28a 100644 --- a/src/s_client.c +++ b/src/s_client.c @@ -322,14 +322,14 @@ s_client(int argc, char **argv) (void) servername; if ( -#if defined(HAVE_CRL) && defined(HAVE_CRL_IO) - wolfSSL_CTX_EnableCRL(ctx, WOLFSSL_CRL_CHECKALL) != - WOLFSSL_SUCCESS || -#endif #ifdef HAVE_OCSP wolfSSL_CTX_EnableOCSP(ctx, WOLFSSL_OCSP_CHECKALL) != WOLFSSL_SUCCESS || #endif +#if defined(HAVE_CRL) && defined(HAVE_CRL_IO) + wolfSSL_CTX_EnableCRL(ctx, WOLFSSL_CRL_CHECKALL) != + WOLFSSL_SUCCESS || +#endif #ifdef HAVE_SNI (servername != NULL && wolfSSL_CTX_UseSNI(ctx, WOLFSSL_SNI_HOST_NAME, servername, |