summaryrefslogtreecommitdiffstats
path: root/apps/x509.c
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2009-06-26 11:28:52 +0000
committerDr. Stephen Henson <steve@openssl.org>2009-06-26 11:28:52 +0000
commit710c1c34d1e81cfae1c1a86f188d911af300daad (patch)
treeea0faba98add8325438b512fa2e1fc61a38656a4 /apps/x509.c
parente16818108f2fb851930789f29622c0cb2d574398 (diff)
Allow checking of self-signed certifictes if a flag is set.
Diffstat (limited to 'apps/x509.c')
-rw-r--r--apps/x509.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/x509.c b/apps/x509.c
index 6e49377f0d..5e81ee8c3f 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -1130,6 +1130,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
/* NOTE: this certificate can/should be self signed, unless it was
* a certificate request in which case it is not. */
X509_STORE_CTX_set_cert(&xsc,x);
+ X509_STORE_CTX_set_flags(&xsc, X509_V_FLAG_CHECK_SS_SIGNATURE);
if (!reqfile && X509_verify_cert(&xsc) <= 0)
goto end;