openssl/crypto/x509
Dr. Stephen Henson e5991ec528 Fix verify algorithm.
Disable loop checking when we retry verification with an alternative path.
This fixes the case where an intermediate CA is explicitly trusted and part
of the untrusted certificate list. By disabling loop checking for this case
the untrusted CA can be replaced by the explicitly trusted case and
verification will succeed.

Reviewed-by: Matt Caswell <matt@openssl.org>
2015-03-24 17:35:59 +00:00
..
by_dir.c More comment realignment 2015-01-22 09:20:10 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
Makefile make depend 2015-03-24 12:05:05 +00:00
x509_att.c Make X509_ATTRIBUTE opaque. 2015-03-16 15:54:19 +00:00
x509_cmp.c Remove old ASN.1 code. 2015-03-23 13:15:06 +00:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509_ext.c Remove obsolete IMPLEMENT_ASN1_SET_OF 2015-02-09 12:47:28 +00:00
x509_lcl.h make X509_EXTENSION opaque 2015-03-23 18:27:04 +00:00
x509_lu.c util/mkstack.pl now generates entire safestack.h 2015-02-06 10:47:53 -05:00
x509_obj.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509_r2x.c Remove old ASN.1 code. 2015-03-23 13:15:06 +00:00
x509_req.c Make X509_ATTRIBUTE opaque. 2015-03-16 15:54:19 +00:00
x509_set.c Remove old ASN.1 code. 2015-03-23 13:15:06 +00:00
x509_trs.c util/mkstack.pl now generates entire safestack.h 2015-02-06 10:47:53 -05:00
x509_txt.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509_v3.c make X509_EXTENSION opaque 2015-03-23 18:27:04 +00:00
x509_vfy.c Fix verify algorithm. 2015-03-24 17:35:59 +00:00
x509_vfy.h Add flag to inhibit checking for alternate certificate chains. Setting this 2015-02-25 09:14:54 +00:00
x509_vpm.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509.h make X509_EXTENSION opaque 2015-03-23 18:27:04 +00:00
x509cset.c Remove old ASN.1 code. 2015-03-23 13:15:06 +00:00
x509name.c More comment realignment 2015-01-22 09:20:10 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509type.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x_attrib.c Make X509_ATTRIBUTE opaque. 2015-03-16 15:54:19 +00:00
x_exten.c make X509_EXTENSION opaque 2015-03-23 18:27:04 +00:00