summaryrefslogtreecommitdiff
path: root/src/lib/libssl/tls13_lib.c
diff options
context:
space:
mode:
authorjsing <>2022-10-17 18:44:36 +0000
committerjsing <>2022-10-17 18:44:36 +0000
commit9ca85afd54f2ef26c0988e91d438dc81e8f88558 (patch)
tree1f1fe5d71021b2e62eda8325c2d15c35af427753 /src/lib/libssl/tls13_lib.c
parent60872b04d07d9a54d9f973c16c8c2c9974d77672 (diff)
downloadopenbsd-9ca85afd54f2ef26c0988e91d438dc81e8f88558.tar.gz
openbsd-9ca85afd54f2ef26c0988e91d438dc81e8f88558.tar.bz2
openbsd-9ca85afd54f2ef26c0988e91d438dc81e8f88558.zip
Revise expire callback regress to use chains with expired certificates.
Rather than using X509_STORE_CTX_set_time() (which is resulting all certificates in the chain being treated as expired), use chains that have an expired leaf or expired intermediate. This triggers a different code path, which is currently mishandled (and hence failing). Also ensure that the resulting error and error depth match what we expect them to be.
Diffstat (limited to 'src/lib/libssl/tls13_lib.c')
0 files changed, 0 insertions, 0 deletions