Re: [openssl-users] openssl verify accepting CA certs issued by intermediate with CA:TRUE, pathlen:0

[Viktor Dukhovni]

> On Oct 4, 2018, at 6:25 AM, Viktor Dukhovni <openssl-us...@dukhovni.org> 
> wrote:
> 
> but this corner-case is not correct, the concept of "self-issued"
> only applies to CAs, so for the leaf to be skipped it would have
> the be a self-issued CA.  Try the patch below:

I've simplified the patch in https://github.com/openssl/openssl/pull/7353
please take a look.

-- 
        Viktor.

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users