From 2c1ca37eff900a425e6e7151e749b765ec71eef5 Mon Sep 17 00:00:00 2001
From: beck <>
Date: Tue, 15 Sep 2020 13:34:56 +0000
Subject: set error_depth and current_cert to make more legacy callbacks that
 don't check happy

ok tb@
---
 src/lib/libcrypto/x509/x509_verify.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'src/lib')

diff --git a/src/lib/libcrypto/x509/x509_verify.c b/src/lib/libcrypto/x509/x509_verify.c
index c3280774f9..8b12f18bfb 100644
--- a/src/lib/libcrypto/x509/x509_verify.c
+++ b/src/lib/libcrypto/x509/x509_verify.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_verify.c,v 1.7 2020/09/15 11:55:14 beck Exp $ */
+/* $OpenBSD: x509_verify.c,v 1.8 2020/09/15 13:34:56 beck Exp $ */
 /*
  * Copyright (c) 2020 Bob Beck <beck@openbsd.org>
  *
@@ -873,6 +873,8 @@ x509_verify(struct x509_verify_ctx *ctx, X509 *leaf, char *name)
 			ctx->error = X509_V_ERR_OUT_OF_MEM;
 			return 0;
 		}
+		ctx->xsc->error_depth = 0;
+		ctx->xsc->current_cert = leaf;
 	}
 
 	if ((current_chain = x509_verify_chain_new()) == NULL) {
-- 
cgit v1.2.3-55-g6feb