Commit 385b3486 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Include TA in checks/callback with partial chains. 

When a chain is complete and ends in a trusted root checks are also
performed on the TA and the callback notified with ok==1. For
consistency do the same for chains where the TA is not self signed.
parent 2dac2667

crypto/x509/x509_vfy.c

+1 −1
Original line number Diff line number Diff line
@@ -1755,7 +1755,7 @@ static int internal_verify(X509_STORE_CTX *ctx) 
		xs=xi;

	else

		{

		if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)

		if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)

			{

			xs = xi;

			goto check_cert;