Extend -show_chain option to verify to show more info
authorMatt Caswell <matt@openssl.org>
Thu, 25 Jun 2015 11:28:28 +0000 (12:28 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 7 Jul 2015 20:57:12 +0000 (21:57 +0100)
commit7f3f41d816bb80e362a5978420f59030b3132c81
treeec3a2e9bf351d8772c257ab495e6491f4000d9ce
parenta64ba70dbb7e4886d7bae0b85a2a1070e22dd8fb
Extend -show_chain option to verify to show more info

The -show_chain flag to the verify command line app shows information about
the chain that has been built. This commit adds the text "untrusted" against
those certificates that have been used from the untrusted list.

Reviewed-by: Rich Salz <rsalz@openssl.org>
apps/verify.c
crypto/x509/x509_vfy.c
doc/apps/verify.pod
doc/crypto/X509_STORE_CTX_new.pod
include/openssl/x509_vfy.h