Hi All,

In earlier version of OpenSSL  (i.e OpenSSL 1.0.1c)  X509_verify_cert had a
check * if (params->trust >0)* before invoking check_trust function.

This has been removed in OpenSSL 1.0.2d. Does it mean applications are
expected to set the X509_VERIFY_PARAM properly?

Our application works fine in OpenSSL 1.0.1c. In OpenSSL 1.0.2d app fails
with X509_TRUST_UNTRUSTED error. I added the check *if (params->trust
>0) *before invoking
the check_trust API and functionality worked fine.

Any help on this well appreciated.

Regards
Jayalakshmi
_______________________________________________
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to