diff options
| author | beck <> | 2018-04-06 07:08:20 +0000 |
|---|---|---|
| committer | beck <> | 2018-04-06 07:08:20 +0000 |
| commit | cbd1d6a8808038e6f357e956a343f70ecaf110f4 (patch) | |
| tree | 3f536dd9c6701ce8c8c9a5fa0d5c883caa5222e2 /src/lib/libc | |
| parent | a0522cf10ae4b806e95c44e85e22fae53f9228d6 (diff) | |
| download | openbsd-cbd1d6a8808038e6f357e956a343f70ecaf110f4.tar.gz openbsd-cbd1d6a8808038e6f357e956a343f70ecaf110f4.tar.bz2 openbsd-cbd1d6a8808038e6f357e956a343f70ecaf110f4.zip | |
poison for X509_VERIFY_PARAM's
Tighten up checks for various X509_VERIFY_PARAM functions, and
allow for the verify param to be poisoned (preculding future
successful cert validation) if the setting of host, ip, or email
for certificate validation fails. (since many callers do not
check the return code in the wild and blunder along anyway)
Inspired by some discussions with Adam Langley.
ok jsing@
Diffstat (limited to 'src/lib/libc')
0 files changed, 0 insertions, 0 deletions