mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-03-31 20:10:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

Remove restriction to only cross-sign self-signed certificates

Browse Source 
CLA: trivial

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21137)
This commit is contained in:
Yannik Sembritzki 2023-05-29 14:04:38 +00:00 committed by Pauli
parent 6b1f763c69
commit 7f4cc3bc34
1 changed files with 3 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
apps/x509.c
View File

@ -1149,16 +1149,7 @@ static int callb(int ok, X509_STORE_CTX *ctx)
if (err == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)
return 1;
/*
* BAD we should have gotten an error. Normally if everything worked
* X509_STORE_CTX_get_error(ctx) will still be set to
* DEPTH_ZERO_SELF_....
*/
if (ok) {
BIO_printf(bio_err,
"Error with certificate to be certified - should be self-signed\n");
return 0;
} else {
if (!ok) {
err_cert = X509_STORE_CTX_get_current_cert(ctx);
print_name(bio_err, "subject=", X509_get_subject_name(err_cert));
BIO_printf(bio_err,
@ -1167,6 +1158,8 @@ static int callb(int ok, X509_STORE_CTX *ctx)
X509_verify_cert_error_string(err));
return 1;
}
return 1;
}
static int purpose_print(BIO *bio, X509 *cert, X509_PURPOSE *pt)