From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 21 Sep 2003 02:11:31 +0000 (+0000)
Subject: In order to get the expected self signed error when
X-Git-Tag: OpenSSL_0_9_6k~8
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=94f5c934f6d1f21d3373a5165696bba9e43e20e3;p=oweals%2Fopenssl.git

In order to get the expected self signed error when
calling X509_verify_cert() in x509.c the cert should
not be added to the trusted store.
---

diff --git a/apps/x509.c b/apps/x509.c
index d20cf15267..3db5112130 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -1063,7 +1063,7 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
 	BIO_free(io);
 	io=NULL;
 	
-	if (!X509_STORE_add_cert(ctx,x)) goto end;
+	/*if (!X509_STORE_add_cert(ctx,x)) goto end;*/
 
 	/* NOTE: this certificate can/should be self signed, unless it was
 	 * a certificate request in which case it is not. */