diff options
author | Richard Levitte <levitte@openssl.org> | 2005-01-17 17:06:58 +0000 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2005-01-17 17:06:58 +0000 |
commit | a7201e9a1bf1282d8a7edcdfc588a62c1217c575 (patch) | |
tree | 9ec5d102f77d5b49b02fbd09c99d3c831d2afba6 /crypto/x509 | |
parent | fcd5cca418c1efcd420cfbdcd56182e0524698c1 (diff) |
Changes concering RFC 3820 (proxy certificates) integration:
- Enforce that there should be no policy settings when the language
is one of id-ppl-independent or id-ppl-inheritAll.
- Add functionality to ssltest.c so that it can process proxy rights
and check that they are set correctly. Rights consist of ASCII
letters, and the condition is a boolean expression that includes
letters, parenthesis, &, | and ^.
- Change the proxy certificate configurations so they get proxy
rights that are understood by ssltest.c.
- Add a script that tests proxy certificates with SSL operations.
Other changes:
- Change the copyright end year in mkerr.pl.
- make update.
Diffstat (limited to 'crypto/x509')
-rw-r--r-- | crypto/x509/x509_vfy.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index cbdd978a7d..ffc07cce6f 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -994,6 +994,7 @@ static int internal_verify(X509_STORE_CTX *ctx) goto end; /* The last error (if any) is still in the error value */ + ctx->current_issuer=xi; ctx->current_cert=xs; ok=(*cb)(1,ctx); if (!ok) goto end; |