diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-14 14:30:46 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-14 14:30:46 +0000 |
| commit | 9a1f59cd3128ddac73d3e0721ecd55935f53ba8b (patch) | |
| tree | 52a4c37e533046e053da9450cf4daaeec6050cf0 /crypto/x509/x509_vfy.h | |
| parent | 4e72220fd659c6ccf93945a40864f4499357bf0e (diff) | |
New verify flag to return success if we have any certificate in the trusted
store instead of the default which is to return an error if we can't build
the complete chain. [backport from HEAD]
Diffstat (limited to 'crypto/x509/x509_vfy.h')
| -rw-r--r-- | crypto/x509/x509_vfy.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/crypto/x509/x509_vfy.h b/crypto/x509/x509_vfy.h index d53f3e3869..ee40e7fe82 100644 --- a/crypto/x509/x509_vfy.h +++ b/crypto/x509/x509_vfy.h @@ -392,6 +392,8 @@ void X509_STORE_CTX_set_depth(X509_STORE_CTX *ctx, int depth); /* Use trusted store first */ #define X509_V_FLAG_TRUSTED_FIRST 0x8000 +/* Allow partial chains if at least one certificate is in trusted store */ +#define X509_V_FLAG_PARTIAL_CHAIN 0x80000 #define X509_VP_FLAG_DEFAULT 0x1 #define X509_VP_FLAG_OVERWRITE 0x2 |