Nick Lewis via RT wrote:
Roumen
Thank you for looking at the patch
[SNIP]
+ if (issuer_num&& (issuer_num< x_num))
Please find a corrected version below
Best Regards
Nick
[SNIP]
With update version i confirm that regression test of a software now
pass with OpenSSL HEAD version.
I still have problem with HEAD regarding check if is for self signed.
This case is not in openssl regression tests ans cannot be reproduced
with openssl command line. Case is when callback function return
true(ok) for when error is X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT for
certificate that is not is trusted store. Later in code function
check_trust() will return X509_TRUST_UNTRUSTED and check with comment /*
If not explicitly trusted then indicate error */ will call again
callback function with different error code. This functionality is not
same as 1.0.0x.
Roumen
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
