set error_depth and current_cert to make more legacy callbacks that don't check

happy

ok tb@

1 files changed, 3 insertions, 1 deletions

diff --git a/src/lib/libcrypto/x509/x509_verify.c b/src/lib/libcrypto/x509/x509_verify.c
index c3280774f9..8b12f18bfb 100644
--- a/src/lib/libcrypto/x509/x509_verify.c
+++ b/src/lib/libcrypto/x509/x509_verify.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_verify.c,v 1.7 2020/09/15 11:55:14 beck Exp $ */
+/* $OpenBSD: x509_verify.c,v 1.8 2020/09/15 13:34:56 beck Exp $ */
 /*
  * Copyright (c) 2020 Bob Beck <beck@openbsd.org>
  *
@@ -873,6 +873,8 @@ x509_verify(struct x509_verify_ctx *ctx, X509 *leaf, char *name)
                         ctx->error = X509_V_ERR_OUT_OF_MEM;
                         return 0;
                 }
+                ctx->xsc->error_depth = 0;
+                ctx->xsc->current_cert = leaf;
         }
 
         if ((current_chain = x509_verify_chain_new()) == NULL) {