From 44ff60bdd4686d90cfe86da3d88445a3a9cb6a97 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Tue, 15 Aug 2006 20:40:56 +0000 Subject: Fixed dumb policy checking bug svn path=/openssl/README; revision=153 --- openssl/README | 8 -------- 1 file changed, 8 deletions(-) diff --git a/openssl/README b/openssl/README index 1e0c6fb8..d1851f09 100644 --- a/openssl/README +++ b/openssl/README @@ -316,11 +316,3 @@ Random reminders and notes to myself: inheritance, per mailing list discussion. - May need to check AKID in crypto/x509/x509_vfy.c:get_crl(). - -- Bug in policy checking code (may not matter): if one attempts to - check policy on a trust anchor, crypto/x509v3/pcy_tree:tree_init() - returns success ("Can't do anythign with just a trust anchor") which - X509_policy_check() line 634 interprets as a malloc failure because - there's no policy tree data structure. Presumably we should just - return success here instead? - -- cgit v1.2.3