diff options
author | Matt Caswell <matt@openssl.org> | 2015-01-27 10:50:38 +0000 |
---|---|---|
committer | Matt Caswell <matt@openssl.org> | 2015-02-25 09:15:02 +0000 |
commit | 25690b7f5f3d78a52c1377b823b40c6a0e12022b (patch) | |
tree | 7ec3978b77d913ea6b4af6a3da6efb4acaf1e0cc /apps/apps.c | |
parent | 15dba5be6a4482a9ad7e5b846291f31e97e338ca (diff) |
Add -no_alt_chains option to apps to implement the new
X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building
certificate chains, the first chain found will be the one used. Without this
flag, if the first chain found is not trusted then we will keep looking to
see if we can build an alternative chain instead.
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/apps.c')
-rw-r--r-- | apps/apps.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/apps/apps.c b/apps/apps.c index bf044d40f8..8412e24687 100644 --- a/apps/apps.c +++ b/apps/apps.c @@ -2362,6 +2362,8 @@ int args_verify(char ***pargs, int *pargc, flags |= X509_V_FLAG_SUITEB_192_LOS; else if (!strcmp(arg, "-partial_chain")) flags |= X509_V_FLAG_PARTIAL_CHAIN; + else if (!strcmp(arg, "-no_alt_chains")) + flags |= X509_V_FLAG_NO_ALT_CHAINS; else return 0; |