generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't do loop detection for self signed check.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2014-02-14 14:52:23 +00:00
parent 847865d0f9
commit 2dac2667d1
1 changed files with 2 additions and 0 deletions

2
crypto/x509/x509_vfy.c

@ -481,6 +481,8 @@ static X509 *find_issuer(X509_STORE_CTX *ctx, STACK_OF(X509) *sk, X509 *x)
static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer) static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
{ {
int ret; int ret;
if (x == issuer)
return cert_self_signed(x);
ret = X509_check_issued(issuer, x); ret = X509_check_issued(issuer, x);
if (ret == X509_V_OK) if (ret == X509_V_OK)
{ {