From: Phil Pennock <pdp@exim.org>
Date: Sat, 25 Feb 2017 03:39:02 +0000 (-0500)
Subject: Pull in vdukhovni/ssl_dane 8270afba fix
X-Git-Tag: exim-4_90_RC1~256
X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/a1ffb9714577b05e570d1150cd6a2200c1eb8eb6

Pull in vdukhovni/ssl_dane 8270afba fix

Negating an int and comparing to another int was a bug which we got
lucky on.
---

diff --git a/src/src/dane-openssl.c b/src/src/dane-openssl.c
index bb927383f..97acccb5a 100644
--- a/src/src/dane-openssl.c
+++ b/src/src/dane-openssl.c
@@ -667,7 +667,7 @@ for (n = sk_X509_num(in); n > 0; --n, ++depth)
     {
     if (grow_chain(dane, UNTRUSTED, ca))
       {
-      if (!X509_check_issued(ca, ca) == X509_V_OK)
+      if (X509_check_issued(ca, ca) != X509_V_OK)
 	{
 	/* Restart with issuer as subject */
 	cert = ca;