diff options
| author | jsing <> | 2017-06-22 17:28:00 +0000 |
|---|---|---|
| committer | jsing <> | 2017-06-22 17:28:00 +0000 |
| commit | 5dacea5422e9e2d797fa7393cc4fde0a41702abe (patch) | |
| tree | 4e36fe8be4bd38723c01022915aba183d6b5e034 /src/lib/libtls/tls_util.c | |
| parent | cd31cce25d615dfe2861f5e3ff513036e75c1d95 (diff) | |
| download | openbsd-5dacea5422e9e2d797fa7393cc4fde0a41702abe.tar.gz openbsd-5dacea5422e9e2d797fa7393cc4fde0a41702abe.tar.bz2 openbsd-5dacea5422e9e2d797fa7393cc4fde0a41702abe.zip | |
Distinguish between self-issued certificates and self-signed certificates.
The certificate verification code has special cases for self-signed
certificates and without this change, self-issued certificates (which it
seems are common place with openvpn/easyrsa) were also being included in
this category.
Based on BoringSSL.
Thanks to Dale Ghent <daleg at elemental dot org> for assisting in
identifying the issue and testing this fix.
ok inoguchi@
Diffstat (limited to 'src/lib/libtls/tls_util.c')
0 files changed, 0 insertions, 0 deletions