diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-12-30 09:57:49 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-14 14:36:09 +0100 |
| commit | fb1e2411042f0367c2560e4ec5e4b1189ca9cd45 (patch) | |
| tree | 76ff10c7eecdbbddaeda44c71d0ede617c2db80c /include | |
| parent | 2a9785c252df6836da90da33aaeed8edb506e556 (diff) | |
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert
This is the backport of #13755 to v1.1.1.
Fixes #13698
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13756)
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/x509v3.h | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/include/openssl/x509v3.h b/include/openssl/x509v3.h index 6c6eca38a5..b9a8943273 100644 --- a/include/openssl/x509v3.h +++ b/include/openssl/x509v3.h @@ -364,8 +364,9 @@ struct ISSUING_DIST_POINT_st { # define EXFLAG_INVALID_POLICY 0x800 # define EXFLAG_FRESHEST 0x1000 -/* Self signed */ -# define EXFLAG_SS 0x2000 +# define EXFLAG_SS 0x2000 /* cert is apparently self-signed */ + +# define EXFLAG_NO_FINGERPRINT 0x100000 # define KU_DIGITAL_SIGNATURE 0x0080 # define KU_NON_REPUDIATION 0x0040 |