summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2003-09-21 02:11:31 +0000
committerDr. Stephen Henson <steve@openssl.org>2003-09-21 02:11:31 +0000
commit94f5c934f6d1f21d3373a5165696bba9e43e20e3 (patch)
tree50bf3468071b32672076e680bf3513e091e44679
parent19ed670b51cc7fd895cfa42899b3b8c1f914c5d2 (diff)
downloadopenssl-new-94f5c934f6d1f21d3373a5165696bba9e43e20e3.tar.gz
In order to get the expected self signed error when
calling X509_verify_cert() in x509.c the cert should not be added to the trusted store.
-rw-r--r--apps/x509.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/x509.c b/apps/x509.c
index d20cf15267..3db5112130 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -1063,7 +1063,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
BIO_free(io);
io=NULL;
- if (!X509_STORE_add_cert(ctx,x)) goto end;
+ /*if (!X509_STORE_add_cert(ctx,x)) goto end;*/
/* NOTE: this certificate can/should be self signed, unless it was
* a certificate request in which case it is not. */