diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2009-06-26 11:29:26 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2009-06-26 11:29:26 +0000 |
| commit | f3be6c7b7d2081101c21c7a9b7ec39f4e86271e5 (patch) | |
| tree | ef92e5f388f36bf637cde6f5f6cde8c4ccde525d /apps | |
| parent | 4aa902ebaffb385199b9d0fb850ca4f9f5cb795e (diff) | |
| download | openssl-f3be6c7b7d2081101c21c7a9b7ec39f4e86271e5.zip openssl-f3be6c7b7d2081101c21c7a9b7ec39f4e86271e5.tar.gz openssl-f3be6c7b7d2081101c21c7a9b7ec39f4e86271e5.tar.bz2 | |
Update from 1.0.0-stable.
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/apps.c | 2 | ||||
| -rw-r--r-- | apps/x509.c | 1 |
2 files changed, 3 insertions, 0 deletions
diff --git a/apps/apps.c b/apps/apps.c index 47413f5..08ce008 100644 --- a/apps/apps.c +++ b/apps/apps.c @@ -2256,6 +2256,8 @@ int args_verify(char ***pargs, int *pargc, flags |= X509_V_FLAG_USE_DELTAS; else if (!strcmp(arg, "-policy_print")) flags |= X509_V_FLAG_NOTIFY_POLICY; + else if (!strcmp(arg, "-check_ss_sig")) + flags |= X509_V_FLAG_CHECK_SS_SIGNATURE; else return 0; diff --git a/apps/x509.c b/apps/x509.c index 6e49377..5e81ee8 100644 --- a/apps/x509.c +++ b/apps/x509.c @@ -1130,6 +1130,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest, /* NOTE: this certificate can/should be self signed, unless it was * a certificate request in which case it is not. */ X509_STORE_CTX_set_cert(&xsc,x); + X509_STORE_CTX_set_flags(&xsc, X509_V_FLAG_CHECK_SS_SIGNATURE); if (!reqfile && X509_verify_cert(&xsc) <= 0) goto end; |