Commit 51227177 authored by Viktor Dukhovni's avatar Viktor Dukhovni Committed by Rich Salz
Browse files

Added missing X509_STORE_CTX_set_error_depth() accessor 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent 2036fd50

crypto/x509/x509_vfy.c

+5 −0
Original line number Diff line number Diff line
@@ -1989,6 +1989,11 @@ int X509_STORE_CTX_get_error_depth(X509_STORE_CTX *ctx) 
    return ctx->error_depth;

}



void X509_STORE_CTX_set_error_depth(X509_STORE_CTX *ctx, int depth)

{

    ctx->error_depth = depth;

}



X509 *X509_STORE_CTX_get_current_cert(X509_STORE_CTX *ctx)

{

    return ctx->current_cert;

doc/crypto/X509_STORE_CTX_get_error.pod

+12 −7
Original line number Diff line number Diff line
@@ -3,8 +3,8 @@ 
=head1 NAME



X509_STORE_CTX_get_error, X509_STORE_CTX_set_error,

X509_STORE_CTX_get_error_depth, X509_STORE_CTX_get_current_cert,

X509_STORE_CTX_get0_cert,

X509_STORE_CTX_get_error_depth, X509_STORE_CTX_set_error_depth,

X509_STORE_CTX_get_current_cert, X509_STORE_CTX_get0_cert,

X509_STORE_CTX_get1_chain, X509_verify_cert_error_string - get or set certificate verification status information



=head1 SYNOPSIS
@@ -15,6 +15,7 @@ X509_STORE_CTX_get1_chain, X509_verify_cert_error_string - get or set certificat 
 int   X509_STORE_CTX_get_error(X509_STORE_CTX *ctx);

 void  X509_STORE_CTX_set_error(X509_STORE_CTX *ctx,int s);

 int   X509_STORE_CTX_get_error_depth(X509_STORE_CTX *ctx);

 void  X509_STORE_CTX_set_error_depth(X509_STORE_CTX *ctx, int depth);

 X509 *X509_STORE_CTX_get_current_cert(X509_STORE_CTX *ctx);

 X509 *X509_STORE_CTX_get0_cert(X509_STORE_CTX *ctx);
@@ -39,6 +40,10 @@ non-negative integer representing where in the certificate chain the error 
occurred. If it is zero it occurred in the end entity certificate, one if

it is the certificate which signed the end entity certificate and so on.



X509_STORE_CTX_set_error_depth() sets the error B<depth>.

This can be used in combination with X509_STORE_CTX_set_error() to set the

depth at which an error condition was detected.



X509_STORE_CTX_get0_cert() returns the leaf certificate being verified.



X509_STORE_CTX_get_current_cert() returns the certificate in B<ctx> which

include/openssl/x509_vfy.h

+1 −0
Original line number Diff line number Diff line
@@ -366,6 +366,7 @@ void *X509_STORE_CTX_get_ex_data(X509_STORE_CTX *ctx, int idx); 
int X509_STORE_CTX_get_error(X509_STORE_CTX *ctx);

void X509_STORE_CTX_set_error(X509_STORE_CTX *ctx, int s);

int X509_STORE_CTX_get_error_depth(X509_STORE_CTX *ctx);

void X509_STORE_CTX_set_error_depth(X509_STORE_CTX *ctx, int depth);

X509 *X509_STORE_CTX_get_current_cert(X509_STORE_CTX *ctx);

X509 *X509_STORE_CTX_get0_current_issuer(X509_STORE_CTX *ctx);

X509_CRL *X509_STORE_CTX_get0_current_crl(X509_STORE_CTX *ctx);