Mark J Cox wrote:
>
> I noticed a problem - when the CA list we were loading from a file
> (standard verify_locations stuff) contained a duplicate certificate all
> certificates after the duplicate would be ignored. This patch alters
> X509_load_cert_file() so that if an error occurs looking at one
> certificate the routine will continue and look for others in the file.
>
> Objections? Mark.
Yep! Surely you should only ignore the error if it was caused by a
duplicate othewise you may fail to report damaged certs, for example?
Even in that case, I'm not entirely convinced...
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
