commit | 7f89714e64d1dc64b50554a92e2a12596b9934ba | [log] [tgz] |
---|---|---|
author | Bodo Möller <bodo@openssl.org> | Sat May 01 03:20:40 1999 +0000 |
committer | Bodo Möller <bodo@openssl.org> | Sat May 01 03:20:40 1999 +0000 |
tree | 940620d173d8a4c7cbea392ba4c9760b7a6efa23 | |
parent | 69bb35ed726102975259808dcf7c279f85afef4f [diff] [blame] |
Support verify_depth from the SSL API without need for user-defined callbacks. Submitted by: Reviewed by: PR:
diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c index 88cc5fc..91494df 100644 --- a/ssl/ssl_cert.c +++ b/ssl/ssl_cert.c
@@ -185,6 +185,8 @@ x=sk_X509_value(sk,0); X509_STORE_CTX_init(&ctx,s->ctx->cert_store,x,sk); + if (SSL_get_verify_depth(s) >= 0) + X509_STORE_CTX_set_depth(&ctx, SSL_get_verify_depth(s)); X509_STORE_CTX_set_ex_data(&ctx,SSL_get_ex_data_X509_STORE_CTX_idx(), (char *)s);