CVSROOT: /cvs
Module name: src
Changes by: js...@cvs.openbsd.org 2020/11/03 10:22:45
Modified files:
lib/libcrypto/x509: x509_verify.c
Log message:
Hook X509_STORE_CTX get_issuer() callback from new X509 verifier.
If we fail to find a parent certificate from either the supplied roots or
intermediates and we have a X509_STORE_CTX, call its get_issuer() callback
to see if it can supply a suitable certificate. This makes things like
certificates by directory (aka by_dir) work correctly.
Issue noted by Uwe Werler <u...@werler.is>
ok beck@ tb@
