ソースを参照

Include TA in checks/callback with partial chains.

When a chain is complete and ends in a trusted root checks are also performed
on the TA and the callback notified with ok==1. For consistency do the same for
chains where the TA is not self signed.

(Imported from upstream's b07e4f2f46)
kris/onging/CECPQ3_patch15
Adam Langley 10年前
コミット
ec72cf5a1c
1個のファイルの変更1行の追加1行の削除
  1. +1
    -1
      crypto/x509/x509_vfy.c

+ 1
- 1
crypto/x509/x509_vfy.c ファイルの表示

@@ -1726,7 +1726,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
xs=xi;
else
{
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
{
xs = xi;
goto check_cert;


読み込み中…
キャンセル
保存