summaryrefslogtreecommitdiffstats
path: root/apps/x509.c
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2009-06-26 13:29:26 +0200
committerDr. Stephen Henson <steve@openssl.org>2009-06-26 13:29:26 +0200
commitf3be6c7b7d2081101c21c7a9b7ec39f4e86271e5 (patch)
treeef92e5f388f36bf637cde6f5f6cde8c4ccde525d /apps/x509.c
parentStop warnings in gcc where "a" is const passed as a non-const argument. (diff)
downloadopenssl-f3be6c7b7d2081101c21c7a9b7ec39f4e86271e5.tar.xz
openssl-f3be6c7b7d2081101c21c7a9b7ec39f4e86271e5.zip
Update from 1.0.0-stable.
Diffstat (limited to 'apps/x509.c')
-rw-r--r--apps/x509.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/x509.c b/apps/x509.c
index 6e49377f0d..5e81ee8c3f 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -1130,6 +1130,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
/* NOTE: this certificate can/should be self signed, unless it was
* a certificate request in which case it is not. */
X509_STORE_CTX_set_cert(&xsc,x);
+ X509_STORE_CTX_set_flags(&xsc, X509_V_FLAG_CHECK_SS_SIGNATURE);
if (!reqfile && X509_verify_cert(&xsc) <= 0)
goto end;