artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e80817c) | patch
When building the chain of the intermediate certificates do not include the
authorclaudio <claudio@openbsd.org>
Tue, 2 Mar 2021 09:00:46 +0000 (09:00 +0000)
committerclaudio <claudio@openbsd.org>
Tue, 2 Mar 2021 09:00:46 +0000 (09:00 +0000)
commit11e5e285d9ab05a37fb14f34471a400ad8d56955
tree478131b49dcef1a2c0fcaa16ae5abaef25fd5833tree | snapshot
parente80817cde3915448064be599220aae4b931d4725commit | diff
When building the chain of the intermediate certificates do not include the
root node (which should be a trust anchor). Trust anchors where added to
the X509_store and having them in the chain is kind of wrong and confuse
the new libressl X509 validator.
OK tb@
usr.sbin/rpki-client/parser.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim