Commit d895f7f0 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

don't do loop check for single self signed certificate

parent ce0ed3b7

crypto/x509/x509_vfy.c

+3 −0
Original line number Diff line number Diff line
@@ -443,6 +443,9 @@ static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer) 
		{

		int i;

		X509 *ch;

		/* Special case: single self signed certificate */

		if (cert_self_signed(x) && sk_X509_num(ctx->chain) == 1)

			return 1;

		for (i = 0; i < sk_X509_num(ctx->chain); i++)

			{

			ch = sk_X509_value(ctx->chain, i);