Pārlūkot izejas kodu

Include TA in checks/callback with partial chains.

When a chain is complete and ends in a trusted root checks are also performed
on the TA and the callback notified with ok==1. For consistency do the same for
chains where the TA is not self signed.

(Imported from upstream's b07e4f2f46)
kris/onging/CECPQ3_patch15
Adam Langley pirms 10 gadiem
vecāks
revīzija
ec72cf5a1c
1 mainītis faili ar 1 papildinājumiem un 1 dzēšanām
  1. +1
    -1
      crypto/x509/x509_vfy.c

+ 1
- 1
crypto/x509/x509_vfy.c Parādīt failu

@@ -1726,7 +1726,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
xs=xi;
else
{
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
{
xs = xi;
goto check_cert;


Notiek ielāde…
Atcelt
Saglabāt