CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/04/01 08:38:26
Modified files:
lib/libcrypto/x509: x509_verify.c
Log message:
Restore the previous behaviour with maximum verification depth.
The maximum depth is not expected to include the leaf certificate - restore
the decrement prior to checking, which means the previous behaviour is
retained for the callback depth and the maximum depth. Reduce the maximum
depth by one in order to avoid the overwrite that could previously occur.
Thanks to anton@ for flagging the rust-openssl failure in regress.
ok tb@
