aboutsummaryrefslogtreecommitdiff
path: root/openssl/trunk/apps
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2006-08-17 14:59:23 +0000
committerRob Austein <sra@hactrn.net>2006-08-17 14:59:23 +0000
commit7fc13d574c89c5e7af75fea61a2733b96561bd77 (patch)
tree42f8af18fcd91d018e6ec104c8304ebc0b16b7b9 /openssl/trunk/apps
parent32f586a877a4cac40b1ff6b0281408f5eb42237a (diff)
Back out previous change to "verify" app, it was a kludge.
Defer RFC 3779 path validation until after the CRL checks. svn path=/openssl/trunk/apps/verify.c; revision=172
Diffstat (limited to 'openssl/trunk/apps')
-rw-r--r--openssl/trunk/apps/verify.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/openssl/trunk/apps/verify.c b/openssl/trunk/apps/verify.c
index 57396563..9ff32cb0 100644
--- a/openssl/trunk/apps/verify.c
+++ b/openssl/trunk/apps/verify.c
@@ -355,7 +355,6 @@ static int MS_CALLBACK cb(int ok, X509_STORE_CTX *ctx)
if (ctx->error == X509_V_ERR_CRL_HAS_EXPIRED) ok=1;
if (ctx->error == X509_V_ERR_CRL_NOT_YET_VALID) ok=1;
if (ctx->error == X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION) ok=1;
- if (ctx->error == X509_V_ERR_UNNESTED_RESOURCE) ok=1;
if (ctx->error == X509_V_ERR_NO_EXPLICIT_POLICY)
policies_print(NULL, ctx);