From eb7f3019456b1a21f7c94f46c9a6e14d8439c2e9 Mon Sep 17 00:00:00 2001
From: David Cooper <dcooper16@gmail.com>
Date: Mon, 30 Apr 2018 10:30:36 -0400
Subject: [PATCH] Fix typo in check_revocation_crl()

When verifying the CRL, check_revocation_crl() calls "openssl" rather than "$OPENSSL".
---
 testssl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/testssl.sh b/testssl.sh
index 3db2699..1be5ff0 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -1482,7 +1482,7 @@ check_revocation_crl() {
           return 1
      fi
      cat $TEMPDIR/intermediatecerts.pem "${tmpfile%%.crl}.pem" >$TEMPDIR/${NODE}-${NODEIP}-CRL-chain.pem
-     openssl verify -crl_check -CAfile $TEMPDIR/${NODE}-${NODEIP}-CRL-chain.pem $TEMPDIR/host_certificate.pem &>$ERRFILE
+     $OPENSSL verify -crl_check -CAfile $TEMPDIR/${NODE}-${NODEIP}-CRL-chain.pem $TEMPDIR/host_certificate.pem &>$ERRFILE
      if [[ $? -eq 0 ]]; then
           out ", "
           pr_svrty_good "not revoked"