[openssl-users] openssl verify accepting CA certs issued by intermediate with CA:TRUE, pathlen:0

Viktor Dukhovni openssl-users at dukhovni.org
Fri Oct 5 05:09:48 UTC 2018



> On Oct 4, 2018, at 6:25 AM, Viktor Dukhovni <openssl-users at dukhovni.org> wrote:
> 
> but this corner-case is not correct, the concept of "self-issued"
> only applies to CAs, so for the leaf to be skipped it would have
> the be a self-issued CA.  Try the patch below:

I've simplified the patch in https://github.com/openssl/openssl/pull/7353
please take a look.

-- 
	Viktor.



More information about the openssl-users mailing list