Return per-certificate chain if extra chain is NULL.

[openssl.git] / ssl / s3_lib.c

diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index ed50be1819cac2857d4c5b51d898b34ce094269a..82f715bfd0c1fd1d998266bb9a5672d6a331d9a4 100644 (file)
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -3909,6 +3909,8 @@ long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
 
        case SSL_CTRL_GET_EXTRA_CHAIN_CERTS:
                *(STACK_OF(X509) **)parg =  ctx->extra_certs;
+               if (parg == NULL && larg == 0)
+                       *(STACK_OF(X509) **)parg =  ctx->cert->key->chain;
                break;
 
        case SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS: