generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

don't do loop check for single self signed certificate

Browse Source
This commit is contained in:
Dr. Stephen Henson 2012-03-05 15:48:13 +00:00
parent ce0ed3b778
commit d895f7f060
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
crypto/x509/x509_vfy.c
View File

@ -443,6 +443,9 @@ static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
{
int i;
X509 *ch;
/* Special case: single self signed certificate */
if (cert_self_signed(x) && sk_X509_num(ctx->chain) == 1)
return 1;
for (i = 0; i < sk_X509_num(ctx->chain); i++)
{
ch = sk_X509_value(ctx->chain, i);