aboutsummaryrefslogtreecommitdiffstats
path: root/apps/opt.c
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2016-06-19 10:55:43 +0200
committerRichard Levitte <levitte@openssl.org>2016-06-20 21:34:37 +0200
commita392ef20f0a9fedc811b6a06bf50ff3f151e266f (patch)
treefb2b07384737b8c961a0fdcfc5467ec871424e24 /apps/opt.c
parented17c7c146a79100bfba5609c3889bddb14f74a2 (diff)
downloadopenssl-a392ef20f0a9fedc811b6a06bf50ff3f151e266f.tar.gz
Allow proxy certs to be present when verifying a chain
Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/opt.c')
-rw-r--r--apps/opt.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/apps/opt.c b/apps/opt.c
index d694fe15f2..f72ac64ec7 100644
--- a/apps/opt.c
+++ b/apps/opt.c
@@ -580,6 +580,9 @@ int opt_verify(int opt, X509_VERIFY_PARAM *vpm)
case OPT_V_NO_CHECK_TIME:
X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NO_CHECK_TIME);
break;
+ case OPT_V_ALLOW_PROXY_CERTS:
+ X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_ALLOW_PROXY_CERTS);
+ break;
}
return 1;