Add -no_alt_chains option to apps to implement the new
authorMatt Caswell <matt@openssl.org>
Tue, 27 Jan 2015 10:50:38 +0000 (10:50 +0000)
committerMatt Caswell <matt@openssl.org>
Wed, 25 Feb 2015 09:15:02 +0000 (09:15 +0000)
commit25690b7f5f3d78a52c1377b823b40c6a0e12022b
tree7ec3978b77d913ea6b4af6a3da6efb4acaf1e0cc
parent15dba5be6a4482a9ad7e5b846291f31e97e338ca
Add -no_alt_chains option to apps to implement the new
X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building
certificate chains, the first chain found will be the one used. Without this
flag, if the first chain found is not trusted then we will keep looking to
see if we can build an alternative chain instead.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
apps/apps.c
apps/cms.c
apps/ocsp.c
apps/s_client.c
apps/s_server.c
apps/smime.c
apps/verify.c