summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl23.h
diff options
context:
space:
mode:
authorbeck <>2024-07-12 18:15:10 +0000
committerbeck <>2024-07-12 18:15:10 +0000
commitd694a3319273a6e59cc84d958713e0342bfc206d (patch)
treecaf914a4a8067bbc8e5b4712e3e4fbf8ffc4c380 /src/lib/libssl/ssl23.h
parenta41114b964f05026c5489e35fb584a9f78de8fce (diff)
downloadopenbsd-d694a3319273a6e59cc84d958713e0342bfc206d.tar.gz
openbsd-d694a3319273a6e59cc84d958713e0342bfc206d.tar.bz2
openbsd-d694a3319273a6e59cc84d958713e0342bfc206d.zip
Fix the horrible and undocumented behaviour of X509_check_trust
Of allowing you to pass in a NID directly, instead of a trust_id, and have it work, as long as the trust_id's and the NID's did not overlap. This screwball behaviour was depended upon by the OCSP code that called X509_check_trust with the NID, instead of the trust id, so let's fix that. We also rename the confusingly named X509_TRUST_DEFAULT to X509_TRUST_ACCEPT_ALL which makes a lot more sense, and rototill this to remove the confusingly named static functions. This will shortly be follwed up by making this function private, so we have not bothered to fix the amazingly obtuse man page as it will be taken behind the barn at that time. ok tb@
Diffstat (limited to 'src/lib/libssl/ssl23.h')
0 files changed, 0 insertions, 0 deletions