aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/ssl_cert.c
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2015-09-02 22:01:18 +0100
committerDr. Stephen Henson <steve@openssl.org>2015-09-06 00:17:37 +0100
commita8d8e06b0ac06c421fd11cc1772126dcb98f79ae (patch)
tree14775147addd9c7785f12bc00db95c1a4a96d566 /ssl/ssl_cert.c
parentf728254a840bf7fdd2252fe09e11a0e99c7df1d4 (diff)
downloadopenssl-a8d8e06b0ac06c421fd11cc1772126dcb98f79ae.tar.gz
Avoid direct X509 structure access
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'ssl/ssl_cert.c')
-rw-r--r--ssl/ssl_cert.c3
1 files changed, 1 insertions, 2 deletions
diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c
index c3e2c2ed0a..555b1d7d82 100644
--- a/ssl/ssl_cert.c
+++ b/ssl/ssl_cert.c
@@ -1028,8 +1028,7 @@ int ssl_build_cert_chain(SSL *s, SSL_CTX *ctx, int flags)
if (sk_X509_num(chain) > 0) {
/* See if last cert is self signed */
x = sk_X509_value(chain, sk_X509_num(chain) - 1);
- X509_check_purpose(x, -1, 0);
- if (x->ex_flags & EXFLAG_SS) {
+ if (X509_get_extension_flags(x) & EXFLAG_SS) {
x = sk_X509_pop(chain);
X509_free(x);
}