Actually error in X509_check_purpose() if x509v3_cache_extensions()
authortb <tb@openbsd.org>
Fri, 29 Oct 2021 12:11:13 +0000 (12:11 +0000)
committertb <tb@openbsd.org>
Fri, 29 Oct 2021 12:11:13 +0000 (12:11 +0000)
commit607be1c9722d954d6209da9e4bb2098e74e7fbb6
treea73fb08d728ff67ca3f12763a7fe221682a04a06
parentcd504819d2b9f02f71ff0f8c114ec26a128a136b
Actually error in X509_check_purpose() if x509v3_cache_extensions()
indicates failure. The previous "error return" X509_V_ERR_UNSPECIFIED
translates to 1, i.e., success. This changes to the intended behavior
of x509_purp.c r1.3 and matches OpenSSL. This will need various
adjustments in the documentation.

ok jsing
lib/libcrypto/x509/x509_purp.c