Commit 7068c8b1 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

In order to get the expected self signed error when 

calling X509_verify_cert() in x509.c the cert should
not be added to the trusted store.
parent 82384690

apps/x509.c

+1 −1
Original line number Diff line number Diff line
@@ -1103,7 +1103,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest, 
	else if (!(bs = x509_load_serial(CAfile, serialfile, create)))

		goto end;



	if (!X509_STORE_add_cert(ctx,x)) goto end;

/*	if (!X509_STORE_add_cert(ctx,x)) goto end;*/



	/* NOTE: this certificate can/should be self signed, unless it was

	 * a certificate request in which case it is not. */