diff options
| author | Richard Levitte <levitte@openssl.org> | 2016-06-19 10:55:29 +0200 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2016-06-20 21:34:37 +0200 |
| commit | ed17c7c146a79100bfba5609c3889bddb14f74a2 (patch) | |
| tree | b9b2af3e89173ef5010f1a753b0041e8c6cd5c20 /apps/verify.c | |
| parent | c8223538cb05e5aac6418a5ba6dc4775b7ab486b (diff) | |
| download | openssl-new-ed17c7c146a79100bfba5609c3889bddb14f74a2.tar.gz | |
Fix proxy certificate pathlength verification
While travelling up the certificate chain, the internal
proxy_path_length must be updated with the pCPathLengthConstraint
value, or verification will not work properly. This corresponds to
RFC 3820, 4.1.4 (a).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/verify.c')
0 files changed, 0 insertions, 0 deletions