[openssl-users] openssl verify accepting CA certs issued by intermediate with CA:TRUE, pathlen:0
openssl-users at dukhovni.org
Fri Oct 5 05:09:48 UTC 2018
> On Oct 4, 2018, at 6:25 AM, Viktor Dukhovni <openssl-users at dukhovni.org> wrote:
> but this corner-case is not correct, the concept of "self-issued"
> only applies to CAs, so for the leaf to be skipped it would have
> the be a self-issued CA. Try the patch below:
I've simplified the patch in https://github.com/openssl/openssl/pull/7353
please take a look.
More information about the openssl-users