[openssl/openssl] a148a9: test/certs/setup.sh: add missing comment on CA cer...

[David von Oheimb]

  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: a148a9b4f49b0c456d45a39c0d63a52405aa5ea9
      https://github.openssl.org/openssl/openssl/commit/a148a9b4f49b0c456d45a39c0d63a52405aa5ea9
  Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
  Date:   2022-07-12 (Tue, 12 Jul 2022)

  Changed paths:
    M test/certs/setup.sh

  Log Message:
  -----------
  test/certs/setup.sh: add missing comment on CA cert variant without basic constraints

Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb at siemens.com>
(Merged from https://github.com/openssl/openssl/pull/18758)


  Commit: 1f00dc4f8c0ef0101368de2adf22495e5e295114
      https://github.openssl.org/openssl/openssl/commit/1f00dc4f8c0ef0101368de2adf22495e5e295114
  Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
  Date:   2022-07-12 (Tue, 12 Jul 2022)

  Changed paths:
    M crypto/x509/x509_vfy.c

  Log Message:
  -----------
  x509_vfy.c: Revert the core of #14094 regarding chain_build() error reporting

The problem of producing to-the-point diagnostics will be fixed in a follow-up PR.
Fixes #18691

Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb at siemens.com>
(Merged from https://github.com/openssl/openssl/pull/18758)


Compare: https://github.openssl.org/openssl/openssl/compare/4e9a4997c540...1f00dc4f8c0e