diff options
| author | Richard Levitte <levitte@openssl.org> | 2016-06-19 10:55:43 +0200 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2016-06-20 21:34:37 +0200 |
| commit | a392ef20f0a9fedc811b6a06bf50ff3f151e266f (patch) | |
| tree | fb2b07384737b8c961a0fdcfc5467ec871424e24 /apps/verify.c | |
| parent | Fix proxy certificate pathlength verification (diff) | |
| download | openssl-a392ef20f0a9fedc811b6a06bf50ff3f151e266f.tar.xz openssl-a392ef20f0a9fedc811b6a06bf50ff3f151e266f.zip | |
Allow proxy certs to be present when verifying a chain
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/verify.c')
| -rw-r--r-- | apps/verify.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/verify.c b/apps/verify.c index 86d1b2a851..40e19d45dc 100644 --- a/apps/verify.c +++ b/apps/verify.c @@ -214,6 +214,7 @@ static int check(X509_STORE *ctx, char *file, (file == NULL) ? "stdin" : file); goto end; } + X509_STORE_set_flags(ctx, vflags); if (!X509_STORE_CTX_init(csc, ctx, x, uchain)) { printf("error %s: X.509 store context initialization failed\n", |