Make tls1_check_chain return a set of flags indicating checks passed
authorDr. Stephen Henson <steve@openssl.org>
Wed, 26 Dec 2012 15:27:44 +0000 (15:27 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 26 Dec 2012 15:27:44 +0000 (15:27 +0000)
commit6660baee66e474058229911950e26e56f31fb0bf
treea5d7fda0ea6ae9e85f3bbab82fcd752264932dfa
parent25d4c9254c1ccb2f9974abd9a9fd64ddb14f7832
Make tls1_check_chain return a set of flags indicating checks passed
by a certificate chain. Add additional tests to handle client
certificates: checks for matching certificate type and issuer name
comparison.

Print out results of checks for each candidate chain tested in
s_server/s_client.
(backport from HEAD)
CHANGES
apps/s_cb.c
ssl/s3_clnt.c
ssl/ssl.h
ssl/ssl_cert.c
ssl/ssl_lib.c
ssl/ssl_locl.h
ssl/t1_lib.c