Include TA in checks/callback with partial chains.

When a chain is complete and ends in a trusted root checks are also performed on the TA and the callback notified with ok==1. For consistency do the same for chains where the TA is not self signed.
openssl · Feb 14, 2014 · 385b348 · 385b348
1 parent 2dac266
commit 385b348
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
@@ -1755,7 +1755,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
 		xs=xi;
 	else
 		{
-		if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)
+		if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
 			{
 			xs = xi;
 			goto check_cert;