ssl_certificate_is_invalid(): If the validity check fails, consider the certificate...

diff --git a/openssl.c b/openssl.c
index 7e4e3d8..d911aff 100644 (file)
--- a/openssl.c
+++ b/openssl.c
@@ -1578,6 +1578,7 @@ static int ssl_certificate_is_invalid(const char *cert_file)
    {
       log_ssl_errors(LOG_LEVEL_ERROR,
          "Error checking certificate %s validity", cert_file);
    {
       log_ssl_errors(LOG_LEVEL_ERROR,
          "Error checking certificate %s validity", cert_file);

+      ret = -1;

    }
 
    X509_free(cert);
    }
 
    X509_free(cert);