diff options
| author | Adam Langley <agl@chromium.org> | 2014-06-20 23:00:00 +0400 |
|---|---|---|
| committer | Adam Langley <agl@chromium.org> | 2014-06-21 00:17:38 +0400 |
| commit | ec72cf5a1c0812bbae614b0f0e0a046f3058fed1 (patch) | |
| tree | cbeaaacd01e817ac067bed8d00b3ab9a2fcbde11 /crypto/x509 | |
| parent | 35163dc9259cf54e534225b37658e584ba764d04 (diff) | |
Include TA in checks/callback with partial chains.
When a chain is complete and ends in a trusted root checks are also performed
on the TA and the callback notified with ok==1. For consistency do the same for
chains where the TA is not self signed.
(Imported from upstream's b07e4f2f46fc286c306353d5e362cbc22c8547fb)
Diffstat (limited to 'crypto/x509')
| -rw-r--r-- | crypto/x509/x509_vfy.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index 4791d1d9..b8889376 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -1726,7 +1726,7 @@ static int internal_verify(X509_STORE_CTX *ctx) xs=xi; else { - if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0) + if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN) { xs = xi; goto check_cert; |