summaryrefslogtreecommitdiffstats
path: root/ssl/ssl.h
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2014-03-27 14:20:16 +0000
committerDr. Stephen Henson <steve@openssl.org>2014-03-27 14:23:46 +0000
commit2dd6976f6d02f98b30c376951ac38f780a86b3b5 (patch)
tree97dc186e80dba228c133905c4ecc2ed78afd01bb /ssl/ssl.h
parent662239183da08d687dc939211ac09d0a5c3a5b93 (diff)
Update chain building function.
Don't clear verification errors from the error queue unless SSL_BUILD_CHAIN_FLAG_CLEAR_ERROR is set. If errors occur during verification and SSL_BUILD_CHAIN_FLAG_IGNORE_ERROR is set return 2 so applications can issue warnings.
Diffstat (limited to 'ssl/ssl.h')
-rw-r--r--ssl/ssl.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/ssl/ssl.h b/ssl/ssl.h
index cce2643ab0..18ac65cfe5 100644
--- a/ssl/ssl.h
+++ b/ssl/ssl.h
@@ -787,6 +787,8 @@ struct ssl_session_st
#define SSL_BUILD_CHAIN_FLAG_CHECK 0x4
/* Ignore verification errors */
#define SSL_BUILD_CHAIN_FLAG_IGNORE_ERROR 0x8
+/* Clear verification errors from queue */
+#define SSL_BUILD_CHAIN_FLAG_CLEAR_ERROR 0x10
/* Flags returned by SSL_check_chain */
/* Certificate can be used with this session */