OpenBSD/src FK7SMOo — lib/libcrypto/x509v3 v3_purp.c x509v3.h
Distinguish between self-issued certificates and self-signed certificates. The certificate verification code has special cases for self-signed certificates and without this change, self-issued certificates (which it seems are common place with openvpn/easyrsa) were also being included in this category. Based on BoringSSL. Thanks to Dale Ghent <daleg at elemental dot org> for assisting in identifying the issue and testing this fix. ok inoguchi@
Version | Delta | File | |
---|---|---|---|
1.30 | +25 | -13 | lib/libcrypto/x509v3/v3_purp.c |
1.22 | +15 | -17 | lib/libcrypto/x509v3/x509v3.h |
+40 | -30 | 2 files |