CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/19 00:07:53
Modified files:
lib/libcrypto/x509: x509_purp.c
lib/libcrypto/man: X509_check_ca.3
Log message:
Align X509_chack_ca() with modern OpenSSL
We have been documenting for quite a while that this API is broken and
that callers need to ensure proper caching of extensions using the usual
X509_check_purpose() trick. Since the API can't indicate errors, choose
to err on the safe side and report a CA only after successful caching of
extensions.
Reported by Frank Denis and others
ok beck, discussed with jsing
