openssl/crypto/x509
Dr. Stephen Henson 47daa155a3 Fix verify algorithm.
Disable loop checking when we retry verification with an alternative path.
This fixes the case where an intermediate CA is explicitly trusted and part
of the untrusted certificate list. By disabling loop checking for this case
the untrusted CA can be replaced by the explicitly trusted case and
verification will succeed.

Signed-off-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit e5991ec528)

Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-04-20 13:42:17 +01:00
..
.cvsignore
by_dir.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
Makefile make update 2014-01-23 17:13:37 +00:00
vpm_int.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_att.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_cmp.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_ext.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_lu.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509_obj.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_r2x.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509_req.c Check public key is not NULL. 2015-03-02 15:26:41 +00:00
x509_set.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_trs.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_txt.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_v3.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_vfy.c Fix verify algorithm. 2015-04-20 13:42:17 +01:00
x509_vfy.h Add flag to inhibit checking for alternate certificate chains. Setting this 2015-04-20 13:42:17 +01:00
x509_vpm.c X509_VERIFY_PARAM_free: Check param for NULL 2015-04-11 20:35:13 +02:00
x509cset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509name.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509type.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00