commit c6d38183d6754b0a7b90527d085a500680e7d2ea
author Rich Salz <rsalz@openssl.org> Wed Mar 28 15:34:16 2018 -0400
committer Rich Salz <rsalz@openssl.org> Wed Mar 28 15:34:16 2018 -0400
tree c90bfeece27c4168f17a4d2f0951e4e4875941b6
parent 92565101ca7bc1587ff1d87f9efa8aa1cfbe62f7

Rewrite the X509->alert mapping code

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5780)

ssl/statem/statem_clnt.c

diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index 29db4bc..91b986f 100644
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -1898,7 +1898,7 @@
      * set. The *documented* interface remains the same.
      */
     if (s->verify_mode != SSL_VERIFY_NONE && i <= 0) {
-        SSLfatal(s, ssl_verify_alarm_type(s->verify_result),
+        SSLfatal(s, ssl_x509err2alert(s->verify_result),
                  SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
                  SSL_R_CERTIFICATE_VERIFY_FAILED);
         goto err;