summaryrefslogtreecommitdiff
path: root/apps/verify.c
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2016-06-19 10:55:43 +0200
committerRichard Levitte <levitte@openssl.org>2016-06-20 21:34:37 +0200
commita392ef20f0a9fedc811b6a06bf50ff3f151e266f (patch)
treefb2b07384737b8c961a0fdcfc5467ec871424e24 /apps/verify.c
parented17c7c146a79100bfba5609c3889bddb14f74a2 (diff)
downloadopenssl-new-a392ef20f0a9fedc811b6a06bf50ff3f151e266f.tar.gz
Allow proxy certs to be present when verifying a chain
Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/verify.c')
-rw-r--r--apps/verify.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/verify.c b/apps/verify.c
index 86d1b2a851..40e19d45dc 100644
--- a/apps/verify.c
+++ b/apps/verify.c
@@ -214,6 +214,7 @@ static int check(X509_STORE *ctx, char *file,
(file == NULL) ? "stdin" : file);
goto end;
}
+
X509_STORE_set_flags(ctx, vflags);
if (!X509_STORE_CTX_init(csc, ctx, x, uchain)) {
printf("error %s: X.509 store context initialization failed\n",