kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Include TA in checks/callback with partial chains.

Browse Source 
When a chain is complete and ends in a trusted root checks are also performed
on the TA and the callback notified with ok==1. For consistency do the same for
chains where the TA is not self signed.

(Imported from upstream's b07e4f2f46fc286c306353d5e362cbc22c8547fb)
This commit is contained in:
Adam Langley 2014-06-20 12:00:00 -07:00
parent 35163dc925
commit ec72cf5a1c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/x509/x509_vfy.c
View File

@ -1726,7 +1726,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
xs=xi; xs=xi;
else else
{ {
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0) if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
{ {
xs = xi; xs = xi;
goto check_cert; goto check_cert;