Add a check_trust call to the legacy chain validation on chain add, remembering
authorbeck <beck@openbsd.org>
Wed, 18 Aug 2021 15:32:38 +0000 (15:32 +0000)
committerbeck <beck@openbsd.org>
Wed, 18 Aug 2021 15:32:38 +0000 (15:32 +0000)
commit4e67fe4c502e68981bcfc9301802524999bcf454
treedc723dbff652be1d0a362d60956c673be3badcdd
parent6a8657ee4f0ceb203a29efc115a1b5ec62bcfeb0
Add a check_trust call to the legacy chain validation on chain add, remembering
the result in order to return the same errors as OpenSSL users expect to override
the generic "Untrusted cert" error.

This fixes the openssl-ruby timestamp test.

ok tb@
lib/libcrypto/x509/x509_verify.c