From ff3d11642a44421d51ea23a2994378482e7dba6c Mon Sep 17 00:00:00 2001 From: beck <> Date: Sun, 6 Nov 2016 10:17:49 +0000 Subject: Commit a reminder that the default is not the default. This needs to be revisited. ok jsing@ --- src/lib/libcrypto/x509/x509_vpm.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/lib/libcrypto/x509/x509_vpm.c b/src/lib/libcrypto/x509/x509_vpm.c index 20524cf221..c71eeccc4c 100644 --- a/src/lib/libcrypto/x509/x509_vpm.c +++ b/src/lib/libcrypto/x509/x509_vpm.c @@ -1,4 +1,4 @@ -/* $OpenBSD: x509_vpm.c,v 1.13 2016/11/06 09:28:25 bcook Exp $ */ +/* $OpenBSD: x509_vpm.c,v 1.14 2016/11/06 10:17:49 beck Exp $ */ /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL * project 2004. */ @@ -575,6 +575,7 @@ static const X509_VERIFY_PARAM default_table[] = { { .name = "default", .depth = 100, + .trust = 0, /* XXX This is not the default trust value */ .id = vpm_empty_id }, { -- cgit v1.2.3-55-g6feb