summaryrefslogtreecommitdiffstats
path: root/crypto/x509
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2005-01-17 17:06:58 +0000
committerRichard Levitte <levitte@openssl.org>2005-01-17 17:06:58 +0000
commita7201e9a1bf1282d8a7edcdfc588a62c1217c575 (patch)
tree9ec5d102f77d5b49b02fbd09c99d3c831d2afba6 /crypto/x509
parentfcd5cca418c1efcd420cfbdcd56182e0524698c1 (diff)
Changes concering RFC 3820 (proxy certificates) integration:
- Enforce that there should be no policy settings when the language is one of id-ppl-independent or id-ppl-inheritAll. - Add functionality to ssltest.c so that it can process proxy rights and check that they are set correctly. Rights consist of ASCII letters, and the condition is a boolean expression that includes letters, parenthesis, &, | and ^. - Change the proxy certificate configurations so they get proxy rights that are understood by ssltest.c. - Add a script that tests proxy certificates with SSL operations. Other changes: - Change the copyright end year in mkerr.pl. - make update.
Diffstat (limited to 'crypto/x509')
-rw-r--r--crypto/x509/x509_vfy.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index cbdd978a7d..ffc07cce6f 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -994,6 +994,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
goto end;
/* The last error (if any) is still in the error value */
+ ctx->current_issuer=xi;
ctx->current_cert=xs;
ok=(*cb)(1,ctx);
if (!ok) goto end;