don't do loop check for single self signed certificate

This commit is contained in:
Dr. Stephen Henson 2012-03-05 15:48:13 +00:00
parent ce0ed3b778
commit d895f7f060

View file

@ -443,6 +443,9 @@ static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
{
int i;
X509 *ch;
/* Special case: single self signed certificate */
if (cert_self_signed(x) && sk_X509_num(ctx->chain) == 1)
return 1;
for (i = 0; i < sk_X509_num(ctx->chain); i++)
{
ch = sk_X509_value(ctx->chain, i);