coverity 175435: seems bogus
authorAndy Green <andy@warmcat.com>
Mon, 6 Feb 2017 02:10:41 +0000 (10:10 +0800)
committerAndy Green <andy@warmcat.com>
Mon, 6 Feb 2017 16:51:25 +0000 (00:51 +0800)
lib/ssl-client.c

index 0578fbd..b8154aa 100644 (file)
@@ -387,14 +387,15 @@ lws_ssl_client_connect2(struct lws *wsi)
        if (n != X509_V_OK) {
                if ((n == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT ||
                     n == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN) &&
-                    wsi->use_ssl & LCCSCF_ALLOW_SELFSIGNED) {
+                    (wsi->use_ssl & LCCSCF_ALLOW_SELFSIGNED)) {
                        lwsl_notice("accepting self-signed certificate\n");
                } else if ((n == X509_V_ERR_CERT_NOT_YET_VALID ||
                            n == X509_V_ERR_CERT_HAS_EXPIRED) &&
-                    wsi->use_ssl & LCCSCF_ALLOW_EXPIRED) {
+                    (wsi->use_ssl & LCCSCF_ALLOW_EXPIRED)) {
                        lwsl_notice("accepting expired certificate\n");
                } else if (n == X509_V_ERR_CERT_NOT_YET_VALID) {
-                       lwsl_notice("Cert is from the future... probably our clock... accepting...\n");
+                       lwsl_notice("Cert is from the future... "
+                                   "probably our clock... accepting...\n");
                } else {
                        lwsl_err("server's cert didn't look good, X509_V_ERR = %d: %s\n",
                                 n, ERR_error_string(n, sb));