github-repos/wget
1
0
Fork 0
mirror of https://github.com/mirror/wget.git synced 2025-03-09 09:10:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

* src/openssl.c (ssl_init): Check for X509_V_FLAG_PARTIAL_CHAIN

Browse Source
This commit is contained in:
Tim Rühsen 2019-04-03 14:54:45 +02:00
parent 39f17b3555
commit 0eaa5f1771
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/openssl.c
View File

@ -328,6 +328,7 @@ ssl_init (void)
SSL_CTX_set_default_verify_paths (ssl_ctx);
SSL_CTX_load_verify_locations (ssl_ctx, opt.ca_cert, opt.ca_directory);
#ifdef X509_V_FLAG_PARTIAL_CHAIN
/* Set X509_V_FLAG_PARTIAL_CHAIN to allow the client to anchor trust in
* a non-self-signed certificate. This defies RFC 4158 (Path Building)
* which defines a trust anchor in terms of a self-signed certificate.
@ -356,6 +357,7 @@ ssl_init (void)
logprintf(LOG_NOTQUIET, _("OpenSSL: Failed to allocate verification param\n"));
/* We continue on error */
}
#endif
if (opt.crl_file)
{