diff --git a/src/charon/credentials/credential_manager.c b/src/charon/credentials/credential_manager.c
index a3235bd04..7b16c521c 100644
--- a/src/charon/credentials/credential_manager.c
+++ b/src/charon/credentials/credential_manager.c
@@ -476,7 +476,7 @@ static certificate_t *fetch_ocsp(private_credential_manager_t *this, char *url,
 		issuer_cert->destroy(issuer_cert);
 		DBG1(DBG_CFG, "  ocsp response is %strusted: %s signature",
 						 ok ? "":"un", ok ? "good" : "bad");
-		if (ok)
+		if (!ok)
 		{
 			response->destroy(response);
 			return NULL;