projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 436dead) | patch
Don't check any revocation info on proxy certificates
authorRichard Levitte <levitte@openssl.org>
Wed, 3 Aug 2016 14:02:20 +0000 (16:02 +0200)
committerRichard Levitte <levitte@openssl.org>
Wed, 3 Aug 2016 14:15:05 +0000 (16:15 +0200)
commit1228ae7738e1ad2189a04ab4ca2dc5a317d1a29c
treed0c8a9b55c6732a7b01a44a7f02d625f799795f1tree | snapshot
parent436dead2e2a157fa501a7538a77b6078391b477fcommit | diff
Don't check any revocation info on proxy certificates

Because proxy certificates typically come without any CRL information,
trying to check revocation on them will fail.  Better not to try
checking such information for them at all.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 790555d6756285b3ec18e3efbb195cf33f217d8f)
crypto/x509/x509_vfy.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.