CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2021/02/25 10:29:22
Modified files:
lib/libcrypto/x509: x509_vfy.c
Log message:
Fix two bugs in the legacy verifier
To integrate the new X.509 verifier, X509_verify_cert() was refactored.
The code building chains in the legacy verifier was split into a
separate function. The first bug is that its return value was treated
as a Boolean although it wasn't. Second, the return alone is not enough
to decide whether to carry on the validation or not.
Slightly rearrange things to restore the behavior of the legacy verifier
prior to this refactoring.
Issue found and test case provided by Anton Borowka and jan.
ok jan jsing
