[openssl-users] openssl verify accepting CA certs issued by intermediate with CA:TRUE, pathlen:0

[Viktor Dukhovni]

> On Oct 4, 2018, at 6:25 AM, Viktor Dukhovni <openssl-users at dukhovni.org> wrote:
> 
> but this corner-case is not correct, the concept of "self-issued"
> only applies to CAs, so for the leaf to be skipped it would have
> the be a self-issued CA.  Try the patch below:

I've simplified the patch in https://github.com/openssl/openssl/pull/7353
please take a look.

-- 
	Viktor.