Import OpenSSL 1.1.0h
This commit is contained in:
@@ -216,7 +216,6 @@ static int verify_chain(X509_STORE_CTX *ctx)
|
||||
if ((ok = build_chain(ctx)) == 0 ||
|
||||
(ok = check_chain_extensions(ctx)) == 0 ||
|
||||
(ok = check_auth_level(ctx)) == 0 ||
|
||||
(ok = check_name_constraints(ctx)) == 0 ||
|
||||
(ok = check_id(ctx)) == 0 || 1)
|
||||
X509_get_pubkey_parameters(NULL, ctx->chain);
|
||||
if (ok == 0 || (ok = ctx->check_revocation(ctx)) == 0)
|
||||
@@ -234,6 +233,9 @@ static int verify_chain(X509_STORE_CTX *ctx)
|
||||
if (!ok)
|
||||
return ok;
|
||||
|
||||
if ((ok = check_name_constraints(ctx)) == 0)
|
||||
return ok;
|
||||
|
||||
#ifndef OPENSSL_NO_RFC3779
|
||||
/* RFC 3779 path validation, now that CRL check has been done */
|
||||
if ((ok = X509v3_asid_validate_path(ctx)) == 0)
|
||||
|
||||
Reference in New Issue
Block a user