Fabian Grünbichler 6c8c78d01a fix validation of self-signed cert chains ...

The interface here is a bit weird - if the verify callback returns 1
for a certificate higher up in the chain, this will propagate to the
next invocation of the callback for the next certificate, even if
openssl on its own would not trust the certificate.

By re-ordering the checks and keeping track of the fact that we
returned 1 despite openssl failing its own validation, the validation
logic should now cover all combinations of certificate count and
self-signed/system trust status.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

2024-03-26 09:34:33 +01:00

debian

bump version to 3.3.1

2023-06-09 07:54:46 +02:00

src

fix validation of self-signed cert chains

2024-03-26 09:34:33 +01:00

Makefile

buildsys: derive upload dist automatically

2023-05-19 16:23:18 +02:00

Description

No description provided

80 KiB

Languages

Perl 93%

Makefile 7%