aboutsummaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2015-06-25 12:28:28 +0100
committerMatt Caswell <matt@openssl.org>2015-07-07 21:57:12 +0100
commit7f3f41d816bb80e362a5978420f59030b3132c81 (patch)
treeec3a2e9bf351d8772c257ab495e6491f4000d9ce /include
parenta64ba70dbb7e4886d7bae0b85a2a1070e22dd8fb (diff)
downloadopenssl-7f3f41d816bb80e362a5978420f59030b3132c81.tar.gz
Extend -show_chain option to verify to show more info
The -show_chain flag to the verify command line app shows information about the chain that has been built. This commit adds the text "untrusted" against those certificates that have been used from the untrusted list. Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'include')
-rw-r--r--include/openssl/x509_vfy.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/include/openssl/x509_vfy.h b/include/openssl/x509_vfy.h
index 4ad20296f8..8e0a225400 100644
--- a/include/openssl/x509_vfy.h
+++ b/include/openssl/x509_vfy.h
@@ -528,6 +528,7 @@ void X509_STORE_CTX_set_verify_cb(X509_STORE_CTX *ctx,
X509_POLICY_TREE *X509_STORE_CTX_get0_policy_tree(X509_STORE_CTX *ctx);
int X509_STORE_CTX_get_explicit_policy(X509_STORE_CTX *ctx);
+int X509_STORE_CTX_get_num_untrusted(X509_STORE_CTX *ctx);
X509_VERIFY_PARAM *X509_STORE_CTX_get0_param(X509_STORE_CTX *ctx);
void X509_STORE_CTX_set0_param(X509_STORE_CTX *ctx, X509_VERIFY_PARAM *param);