Include TA in checks/callback with partial chains.
[openssl.git] / crypto / x509 / x509_vfy.c
index 8129fa0..869a4f2 100644 (file)
@@ -1755,7 +1755,7 @@ static int internal_verify(X509_STORE_CTX *ctx)
                xs=xi;
        else
                {
-               if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN && n == 0)
+               if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
                        {
                        xs = xi;
                        goto check_cert;