Commit b392e520 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Move allow_proxy_certs declaration to start of function.

parent 0858b71b

crypto/x509/x509_vfy.c

+1 −1
Original line number Diff line number Diff line
@@ -390,8 +390,8 @@ static int check_chain_extensions(X509_STORE_CTX *ctx) 
	X509 *x;

	int (*cb)(int ok,X509_STORE_CTX *ctx);

	int proxy_path_length = 0;

	cb=ctx->verify_cb;

	int allow_proxy_certs = !!(ctx->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);

	cb=ctx->verify_cb;



	/* must_be_ca can have 1 of 3 values:

	   -1: we accept both CA and non-CA certificates, to allow direct