Nick Lewis via RT wrote: > Roumen > > Thank you for looking at the patch [SNIP] > + if (issuer_num&& (issuer_num< x_num)) > > Please find a corrected version below > > Best Regards > Nick > [SNIP] With update version i confirm that regression test of a software now pass with OpenSSL HEAD version.
I still have problem with HEAD regarding check if is for self signed. This case is not in openssl regression tests ans cannot be reproduced with openssl command line. Case is when callback function return true(ok) for when error is X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT for certificate that is not is trusted store. Later in code function check_trust() will return X509_TRUST_UNTRUSTED and check with comment /* If not explicitly trusted then indicate error */ will call again callback function with different error code. This functionality is not same as 1.0.0x. Roumen ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
