diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2009-06-26 11:28:52 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2009-06-26 11:28:52 +0000 |
commit | 710c1c34d1e81cfae1c1a86f188d911af300daad (patch) | |
tree | ea0faba98add8325438b512fa2e1fc61a38656a4 /apps/x509.c | |
parent | e16818108f2fb851930789f29622c0cb2d574398 (diff) | |
download | openssl-new-710c1c34d1e81cfae1c1a86f188d911af300daad.tar.gz |
Allow checking of self-signed certifictes if a flag is set.
Diffstat (limited to 'apps/x509.c')
-rw-r--r-- | apps/x509.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/x509.c b/apps/x509.c index 6e49377f0d..5e81ee8c3f 100644 --- a/apps/x509.c +++ b/apps/x509.c @@ -1130,6 +1130,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest, /* NOTE: this certificate can/should be self signed, unless it was * a certificate request in which case it is not. */ X509_STORE_CTX_set_cert(&xsc,x); + X509_STORE_CTX_set_flags(&xsc, X509_V_FLAG_CHECK_SS_SIGNATURE); if (!reqfile && X509_verify_cert(&xsc) <= 0) goto end; |