generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Include TA in checks/callback with partial chains.

Browse Source 
When a chain is complete and ends in a trusted root checks are also
performed on the TA and the callback notified with ok==1. For
consistency do the same for chains where the TA is not self signed.
(cherry picked from commit 385b3486661628f3f806205752bf968b8114b347)
This commit is contained in:
Dr. Stephen Henson 2014-02-14 15:07:01 +00:00
parent ced6dc5cef
commit b07e4f2f46
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/x509/x509_vfy.c
View File

@ -1735,7 +1735,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
xs=xi;
else
{
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
{
xs = xi;
goto check_cert;