Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Move leaf certificate checks to the last thing after chain validation. | beck | 2022-06-25 | 1 | -0/+279 |
While seemingly illogical and not what is done in Go's validator, this mimics OpenSSL's behavior so that callback overrides for the expiry of a certificate will not "sticky" override a failure to build a chain. ok jsing@ |