projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ea24fe2) | patch
Don't check any revocation info on proxy certificates
authorRichard Levitte <levitte@openssl.org>
Wed, 3 Aug 2016 14:02:20 +0000 (16:02 +0200)
committerRichard Levitte <levitte@openssl.org>
Wed, 3 Aug 2016 14:05:28 +0000 (16:05 +0200)
commit790555d6756285b3ec18e3efbb195cf33f217d8f
tree2c58872b58d0a706b7a7fe02a3460e513ae8a973tree | snapshot
parentea24fe29968299ee68c70467ef4dd2cbc53bbee9commit | diff
Don't check any revocation info on proxy certificates

Because proxy certificates typically come without any CRL information,
trying to check revocation on them will fail.  Better not to try
checking such information for them at all.

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509/x509_vfy.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.