summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/x509/x509_internal.h
diff options
context:
space:
mode:
authorbeck <>2021-08-28 07:49:00 +0000
committerbeck <>2021-08-28 07:49:00 +0000
commit99cb09f81fcfcb0bfc150b5e788033d107fa99a9 (patch)
treef04498f61a23f39a6e43a9e84d4a1e9e9c6566d8 /src/lib/libcrypto/x509/x509_internal.h
parent307723997c5211e804da25ff4cfd81b774204a29 (diff)
downloadopenbsd-99cb09f81fcfcb0bfc150b5e788033d107fa99a9.tar.gz
openbsd-99cb09f81fcfcb0bfc150b5e788033d107fa99a9.tar.bz2
openbsd-99cb09f81fcfcb0bfc150b5e788033d107fa99a9.zip
Remove the "dump_chain" flag and code. This was a workaround for a problem where
roots were not checked correctly before intermediates that has since been fixed and is no longer necessary. It is regress checked by case 2c in regress/lib/libcrypto/x509/verify.c ok jsing@ tb@
Diffstat (limited to 'src/lib/libcrypto/x509/x509_internal.h')
-rw-r--r--src/lib/libcrypto/x509/x509_internal.h3
1 files changed, 1 insertions, 2 deletions
diff --git a/src/lib/libcrypto/x509/x509_internal.h b/src/lib/libcrypto/x509/x509_internal.h
index 493bf82ac8..f6ce78346e 100644
--- a/src/lib/libcrypto/x509/x509_internal.h
+++ b/src/lib/libcrypto/x509/x509_internal.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: x509_internal.h,v 1.9 2021/08/19 03:44:00 beck Exp $ */ 1/* $OpenBSD: x509_internal.h,v 1.10 2021/08/28 07:49:00 beck Exp $ */
2/* 2/*
3 * Copyright (c) 2020 Bob Beck <beck@openbsd.org> 3 * Copyright (c) 2020 Bob Beck <beck@openbsd.org>
4 * 4 *
@@ -69,7 +69,6 @@ struct x509_verify_ctx {
69 int saved_error; 69 int saved_error;
70 int saved_error_depth; 70 int saved_error_depth;
71 size_t chains_count; 71 size_t chains_count;
72 int dump_chain; /* Dump current chain without erroring */
73 STACK_OF(X509) *roots; /* Trusted roots for this validation */ 72 STACK_OF(X509) *roots; /* Trusted roots for this validation */
74 STACK_OF(X509) *intermediates; /* Intermediates provided by peer */ 73 STACK_OF(X509) *intermediates; /* Intermediates provided by peer */
75 time_t *check_time; /* Time for validity checks */ 74 time_t *check_time; /* Time for validity checks */