@@ -440,26 +440,26 @@ static int X509StoreVerifyCert(WOLFSSL_X509_STORE_CTX* ctx)
440440 WOLFSSL_SUCCESS : ret ;
441441 #endif
442442 }
443- #if !defined(NO_ASN_TIME ) && defined(OPENSSL_ALL )
444- if (ret != WC_NO_ERR_TRACE (ASN_BEFORE_DATE_E ) &&
445- ret != WC_NO_ERR_TRACE (ASN_AFTER_DATE_E )) {
446- /* With OpenSSL, we need to check the certificate's date
447- * after certificate manager verification,
448- * as it skips date validation when other errors are present.
449- */
450- ret = X509StoreVerifyCertDate (ctx , ret );
451- SetupStoreCtxError (ctx , ret );
452- ret = ret == WOLFSSL_SUCCESS ? 1 : 0 ;
453- if (ctx -> store -> verify_cb ) {
454- if (ctx -> store -> verify_cb (ret , ctx ) == 1 ) {
455- ret = WOLFSSL_SUCCESS ;
456- }
457- else {
458- ret = -1 ;
459- }
443+ #if !defined(NO_ASN_TIME ) && defined(OPENSSL_ALL )
444+ if (ret != WC_NO_ERR_TRACE (ASN_BEFORE_DATE_E ) &&
445+ ret != WC_NO_ERR_TRACE (ASN_AFTER_DATE_E )) {
446+ /* With OpenSSL, we need to check the certificate's date
447+ * after certificate manager verification,
448+ * as it skips date validation when other errors are present.
449+ */
450+ ret = X509StoreVerifyCertDate (ctx , ret );
451+ SetupStoreCtxError (ctx , ret );
452+ ret = ret == WOLFSSL_SUCCESS ? 1 : 0 ;
453+ if (ctx -> store -> verify_cb ) {
454+ if (ctx -> store -> verify_cb (ret , ctx ) == 1 ) {
455+ ret = WOLFSSL_SUCCESS ;
456+ }
457+ else {
458+ ret = -1 ;
460459 }
461460 }
462- #endif
461+ }
462+ #endif
463463 return ret ;
464464}
465465
0 commit comments