[openssl/openssl] 15e225: test/certs/setup.sh: add missing comment on CA cer...

Tue Jul 12 12:00:12 UTC 2022

  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 15e2254432499ef611cc28be219e5e972427d0bd
      https://github.openssl.org/openssl/openssl/commit/15e2254432499ef611cc28be219e5e972427d0bd
  Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
  Date:   2022-07-12 (Tue, 12 Jul 2022)

  Changed paths:
    M test/certs/setup.sh

  Log Message:
  -----------
  test/certs/setup.sh: add missing comment on CA cert variant without basic constraints

Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb at siemens.com>
(Merged from https://github.com/openssl/openssl/pull/18758)

(cherry picked from commit a148a9b4f49b0c456d45a39c0d63a52405aa5ea9)

  Commit: a58afad99640c51c756ac0aa26988a67fccb6dae
      https://github.openssl.org/openssl/openssl/commit/a58afad99640c51c756ac0aa26988a67fccb6dae
  Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
  Date:   2022-07-12 (Tue, 12 Jul 2022)

  Changed paths:
    M crypto/x509/x509_vfy.c

  Log Message:
  -----------
  x509_vfy.c: Revert the core of #14094 regarding chain_build() error reporting

The problem of producing to-the-point diagnostics will be fixed in a follow-up PR.
Fixes #18691

Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb at siemens.com>
(Merged from https://github.com/openssl/openssl/pull/18758)

(cherry picked from commit 1f00dc4f8c0ef0101368de2adf22495e5e295114)

Compare: https://github.openssl.org/openssl/openssl/compare/f6b6356fdbee...a58afad99640