diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2014-02-14 14:52:23 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2014-02-14 14:52:23 +0000 |
| commit | 2dac2667d1ec0ffd9f5609cc07f7e1221624e152 (patch) | |
| tree | c9775d493c720ff394ed0102818ceadd9ac50fbe /crypto/x509 | |
| parent | 847865d0f9810a2f9c0eb7a5dc5d0c29f50b84ba (diff) | |
| download | openssl-2dac2667d1ec0ffd9f5609cc07f7e1221624e152.tar.gz | |
Don't do loop detection for self signed check.
Diffstat (limited to 'crypto/x509')
| -rw-r--r-- | crypto/x509/x509_vfy.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index b7e3f6e996..8129fa084d 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -481,6 +481,8 @@ static X509 *find_issuer(X509_STORE_CTX *ctx, STACK_OF(X509) *sk, X509 *x) static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer) { int ret; + if (x == issuer) + return cert_self_signed(x); ret = X509_check_issued(issuer, x); if (ret == X509_V_OK) { |