diff options
| author | Richard Levitte <levitte@openssl.org> | 2016-06-19 10:55:43 +0200 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2016-06-29 23:13:54 +0200 |
| commit | 6ad8c48291622a6ccc51489b9a230c9a05ca5614 (patch) | |
| tree | 59dbb87fa65f783704e176f21cfa177fba54f829 | |
| parent | 30aeb3128199c15760a785d88a4eda9e156d5af6 (diff) | |
| download | openssl-6ad8c48291622a6ccc51489b9a230c9a05ca5614.tar.gz | |
Allow proxy certs to be present when verifying a chain
Reviewed-by: Rich Salz <rsalz@openssl.org>
| -rw-r--r-- | apps/apps.c | 2 | ||||
| -rw-r--r-- | doc/apps/verify.pod | 5 |
2 files changed, 7 insertions, 0 deletions
diff --git a/apps/apps.c b/apps/apps.c index b1dd97038f..0385490306 100644 --- a/apps/apps.c +++ b/apps/apps.c @@ -2374,6 +2374,8 @@ int args_verify(char ***pargs, int *pargc, flags |= X509_V_FLAG_PARTIAL_CHAIN; else if (!strcmp(arg, "-no_alt_chains")) flags |= X509_V_FLAG_NO_ALT_CHAINS; + else if (!strcmp(arg, "-allow_proxy_certs")) + flags |= X509_V_FLAG_ALLOW_PROXY_CERTS; else return 0; diff --git a/doc/apps/verify.pod b/doc/apps/verify.pod index bffa6c0ec4..b3767325ae 100644 --- a/doc/apps/verify.pod +++ b/doc/apps/verify.pod @@ -27,6 +27,7 @@ B<openssl> B<verify> [B<-use_deltas>] [B<-policy_print>] [B<-no_alt_chains>] +[B<-allow_proxy_certs>] [B<-untrusted file>] [B<-help>] [B<-issuer_checks>] @@ -139,6 +140,10 @@ be found that is trusted. With this option that behaviour is suppressed so that only the first chain found is ever used. Using this option will force the behaviour to match that of previous OpenSSL versions. +=item B<-allow_proxy_certs> + +Allow the verification of proxy certificates. + =item B<-trusted file> A file of additional trusted certificates. The file should contain multiple |