diff options
| -rw-r--r-- | src/lib/libcrypto/x509/x509_vpm.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/lib/libcrypto/x509/x509_vpm.c b/src/lib/libcrypto/x509/x509_vpm.c index 2c02b7bb74..e637528705 100644 --- a/src/lib/libcrypto/x509/x509_vpm.c +++ b/src/lib/libcrypto/x509/x509_vpm.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: x509_vpm.c,v 1.20 2020/09/14 07:09:06 beck Exp $ */ | 1 | /* $OpenBSD: x509_vpm.c,v 1.21 2020/09/14 07:32:05 beck Exp $ */ |
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
| 3 | * project 2004. | 3 | * project 2004. |
| 4 | */ | 4 | */ |
| @@ -178,6 +178,8 @@ x509_verify_param_zero(X509_VERIFY_PARAM *param) | |||
| 178 | /*param->inh_flags = X509_VP_FLAG_DEFAULT;*/ | 178 | /*param->inh_flags = X509_VP_FLAG_DEFAULT;*/ |
| 179 | param->inh_flags = 0; | 179 | param->inh_flags = 0; |
| 180 | param->flags = 0; | 180 | param->flags = 0; |
| 181 | /* XXX remove to enable new verifier by default */ | ||
| 182 | param->flags |= X509_V_FLAG_LEGACY_VERIFY; | ||
| 181 | param->depth = -1; | 183 | param->depth = -1; |
| 182 | if (param->policies) { | 184 | if (param->policies) { |
| 183 | sk_ASN1_OBJECT_pop_free(param->policies, ASN1_OBJECT_free); | 185 | sk_ASN1_OBJECT_pop_free(param->policies, ASN1_OBJECT_free); |