Commit b07e4f2f authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Include TA in checks/callback with partial chains. 

When a chain is complete and ends in a trusted root checks are also
performed on the TA and the callback notified with ok==1. For
consistency do the same for chains where the TA is not self signed.
(cherry picked from commit 385b3486)
parent ced6dc5c

crypto/x509/x509_vfy.c

+1 −1
Original line number Diff line number Diff line
@@ -1735,7 +1735,7 @@ static int internal_verify(X509_STORE_CTX *ctx) 
		xs=xi;

	else

		{

		if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)

		if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)

			{

			xs = xi;

			goto check_cert;