summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/lib/libcrypto/x509/x509_verify.c8
1 files changed, 1 insertions, 7 deletions
diff --git a/src/lib/libcrypto/x509/x509_verify.c b/src/lib/libcrypto/x509/x509_verify.c
index c60bdf743f..6cb372dbce 100644
--- a/src/lib/libcrypto/x509/x509_verify.c
+++ b/src/lib/libcrypto/x509/x509_verify.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: x509_verify.c,v 1.63 2023/01/20 22:00:47 job Exp $ */ 1/* $OpenBSD: x509_verify.c,v 1.64 2023/04/16 07:59:57 tb Exp $ */
2/* 2/*
3 * Copyright (c) 2020-2021 Bob Beck <beck@openbsd.org> 3 * Copyright (c) 2020-2021 Bob Beck <beck@openbsd.org>
4 * 4 *
@@ -907,12 +907,6 @@ x509_verify_cert_extensions(struct x509_verify_ctx *ctx, X509 *cert, int need_ca
907 return 0; 907 return 0;
908 } 908 }
909 909
910 /* XXX support proxy certs later in new api */
911 if (ctx->xsc == NULL && cert->ex_flags & EXFLAG_PROXY) {
912 ctx->error = X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED;
913 return 0;
914 }
915
916 return 1; 910 return 1;
917} 911}
918 912