Set is_trusted in x509_verify_ctx_add_chain()
authortb <tb@openbsd.org>
Fri, 26 Feb 2021 15:19:41 +0000 (15:19 +0000)
committertb <tb@openbsd.org>
Fri, 26 Feb 2021 15:19:41 +0000 (15:19 +0000)
commit57f6d6df0d63d97b03e3a21985d780169e9bd905
treebd8349e1b25ad6c369e5c4557749a9e981979675
parent0306fa890349457b28d9e2165861fecc320bf09c
Set is_trusted in x509_verify_ctx_add_chain()

If we're about to add a chain we have a trust path, so we have at least
one trusted certificate. This fixes a thinko from r1.31 and fixes the
openssl(1) cms verify test.

ok jsing (who had the same diff)
lib/libcrypto/x509/x509_verify.c