summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorSimon Josefsson <simon@josefsson.org>2009-01-09 10:54:16 +0100
committerSimon Josefsson <simon@josefsson.org>2009-01-09 10:54:16 +0100
commit78ac1b06bacd0ad46c66b4731c3981d2d1084c8d (patch)
tree44aa00f9250590b9c68d70ac422e082cbadc7fb7 /src
parent0bfac55d449e56cd30dad6e41fa53f16ec5456b0 (diff)
downloadgnutls-78ac1b06bacd0ad46c66b4731c3981d2d1084c8d.tar.gz
Permit V1 CA's in new --verify-chain code.
Diffstat (limited to 'src')
-rw-r--r--src/certtool.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/certtool.c b/src/certtool.c
index c8f4f375fc..b629d60276 100644
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -2193,7 +2193,8 @@ _verify_x509_mem (const void *cert, int cert_size)
&x509_cert_list[x509_ncerts - 1], 1,
x509_crl_list,
x509_ncrls,
- 0, &verify_status);
+ GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT,
+ &verify_status);
if (ret < 0)
error (EXIT_FAILURE, 0, "gnutls_x509_crt_list_verify: %s",
gnutls_strerror (ret));