修改本地Redis缓存非可信证书key值

2021-04-19 16:37:19 +08:00
parent 02110480c4
commit 3f0c7edd35
1 changed files with 2 additions and 1 deletions
--- a/program/src/cert_session.cpp
+++ b/program/src/cert_session.cpp
@@ -1625,7 +1625,8 @@ x509_get_rkey(X509 *origin, int keyring_id, char *rkey, int is_valid)
    }
    /** keyrind_id is 0, sign x509 by default */
    /** 0 uninsec, 1 insec*/
-    if (is_valid && keyring_id == 0) keyring_id = 1;
+    if (is_valid == 1 && keyring_id == 0) keyring_id = 1;
+	if (is_valid == 0 && keyring_id != 0) keyring_id = 0;

    struct pxy_obj_keyring *pxy_obj = get_obj_for_id(keyring_id);
    if (pxy_obj != NULL)