diff options
| author | jsing <> | 2020-01-02 06:37:13 +0000 |
|---|---|---|
| committer | jsing <> | 2020-01-02 06:37:13 +0000 |
| commit | d7e8782493bda5a46e15fb13e492e89970fed909 (patch) | |
| tree | c238927ae87e866bfc523f55a22fdb2ba246d1de /src/lib/libc/stdlib/realpath.c | |
| parent | 92c7edc8eaad10f666525c5fb64a55987aaf0a81 (diff) | |
| download | openbsd-d7e8782493bda5a46e15fb13e492e89970fed909.tar.gz openbsd-d7e8782493bda5a46e15fb13e492e89970fed909.tar.bz2 openbsd-d7e8782493bda5a46e15fb13e492e89970fed909.zip | |
Revise SSL_CTX_get_extra_chain_certs() to match OpenSSL behaviour.
In OpenSSL, SSL_CTX_get_extra_chain_certs() really means return extra
certs, unless there are none, in which case return the chain associated
with the certificate. If you really just want the extra certs, including
knowing if there are no extra certs, then you need to call
SSL_CTX_get_extra_chain_certs_only()! And to make this even more
entertaining, these functions are not documented in any OpenSSL release.
Reported by sephiroth-j on github, since the difference in behaviour
apparently breaks OCSP stapling with nginx.
ok beck@ inoguchi@ tb@
Diffstat (limited to 'src/lib/libc/stdlib/realpath.c')
0 files changed, 0 insertions, 0 deletions