| commit | a392ef20f0a9fedc811b6a06bf50ff3f151e266f | [log] [tgz] |
|---|---|---|
| author | Richard Levitte <levitte@openssl.org> | Sun Jun 19 10:55:43 2016 +0200 |
| committer | Richard Levitte <levitte@openssl.org> | Mon Jun 20 21:34:37 2016 +0200 |
| tree | fb2b07384737b8c961a0fdcfc5467ec871424e24 | |
| parent | ed17c7c146a79100bfba5609c3889bddb14f74a2 [diff] [blame] |
Allow proxy certs to be present when verifying a chain Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org>
diff --git a/apps/opt.c b/apps/opt.c index d694fe1..f72ac64 100644 --- a/apps/opt.c +++ b/apps/opt.c
@@ -580,6 +580,9 @@ case OPT_V_NO_CHECK_TIME: X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NO_CHECK_TIME); break; + case OPT_V_ALLOW_PROXY_CERTS: + X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_ALLOW_PROXY_CERTS); + break; } return 1;