From cbcdd558e87dfc1c24eb6a47c1fb660d41c2a56f Mon Sep 17 00:00:00 2001 From: cvs2svn Date: Mon, 4 May 2026 13:55:22 +0000 Subject: This commit was manufactured by cvs2git to create branch 'OPENBSD_7_9'. --- src/lib/libcrypto/x509/x509_verify.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) (limited to 'src/lib/libcrypto') diff --git a/src/lib/libcrypto/x509/x509_verify.c b/src/lib/libcrypto/x509/x509_verify.c index fc3fbc14da..640558b685 100644 --- a/src/lib/libcrypto/x509/x509_verify.c +++ b/src/lib/libcrypto/x509/x509_verify.c @@ -1,4 +1,4 @@ -/* $OpenBSD: x509_verify.c,v 1.75 2026/04/01 14:38:26 jsing Exp $ */ +/* $OpenBSD: x509_verify.c,v 1.76 2026/05/04 13:55:20 tb Exp $ */ /* * Copyright (c) 2020-2021 Bob Beck * @@ -668,11 +668,9 @@ x509_verify_build_chains(struct x509_verify_ctx *ctx, X509 *cert, depth = sk_X509_num(current_chain->certs); if (depth > 0) depth--; - if (depth >= ctx->max_depth) { - (void)x509_verify_cert_error(ctx, cert, depth, - X509_V_ERR_CERT_CHAIN_TOO_LONG, 0); + if (depth >= ctx->max_depth && !x509_verify_cert_error(ctx, cert, depth, + X509_V_ERR_CERT_CHAIN_TOO_LONG, 0)) return; - } count = ctx->chains_count; -- cgit v1.2.3-55-g6feb