Add trust setting support to the verify code. It now checks the

trust settings of the root CA.

After a few fixes it seems to work OK.

Still need to add support to SSL and S/MIME code though.
This commit is contained in:
Dr. Stephen Henson
1999-11-27 19:43:10 +00:00
parent 74ecf9e2bb
commit 51630a3706
10 changed files with 90 additions and 18 deletions

View File

@@ -85,6 +85,7 @@ int MAIN(int argc, char **argv)
X509_LOOKUP *lookup=NULL;
X509_PURPOSE_add_standard();
X509_TRUST_add_standard();
X509V3_add_standard_extensions();
cert_ctx=X509_STORE_new();
if (cert_ctx == NULL) goto end;
@@ -199,6 +200,7 @@ end:
sk_X509_pop_free(untrusted, X509_free);
X509V3_EXT_cleanup();
X509_PURPOSE_cleanup();
X509_TRUST_cleanup();
EXIT(ret);
}