The cert subdir is testing all combinations of certificate validation.

Having the three libraries, client and server certificates, missing
or invalid CA or certificates, and enforcing peer certificate results
in 1944 new test cases.

1 files changed, 11 insertions, 1 deletions

diff --git a/src/regress/lib/libssl/interop/util.c b/src/regress/lib/libssl/interop/util.c
index b012d73193..5190e81828 100644
--- a/src/regress/lib/libssl/interop/util.c
+++ b/src/regress/lib/libssl/interop/util.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: util.c,v 1.2 2018/11/07 06:29:26 bluhm Exp $  */
+/*      $OpenBSD: util.c,v 1.3 2018/11/09 06:30:41 bluhm Exp $  */
 /*
  * Copyright (c) 2018 Alexander Bluhm <bluhm@openbsd.org>
  *
@@ -133,3 +133,13 @@ err_ssl(int eval, const char *fmt, ...)
         verrx(eval, fmt, ap);
         va_end(ap);
 }
+
+int
+verify_callback(int preverify_ok, X509_STORE_CTX *x509_ctx)
+{
+        printf("verify: %s\n", preverify_ok ? "pass" : "fail");
+        if (fflush(stdout) != 0)
+                err(1, "fflush stdout");
+
+        return preverify_ok;
+}