| commit | 83ef2306a1481e0cf7f53899c390497256711e29 | [log] [tgz] |
|---|---|---|
| author | Sándor Oroszi <oroszisam@gmail.com> | Mon Oct 12 15:42:23 2020 +0200 |
| committer | GitHub <noreply@github.com> | Mon Oct 12 08:42:23 2020 -0500 |
| tree | f27916271dde163143de9d7963805695d3f038b9 | |
| parent | 43c97767afe7aa1dccefec35946dbc8b9cde73a4 [diff] |
Allow using additional untrusted certificates for chain building in X509StoreContext (#948) The additional certificates provided in the new `chain` parameter will be untrusted but may be used to build the chain. This makes it easier to validate a certificate against a store which contains only root ca certificates, and the intermediates come from e.g. the same untrusted source as the certificate to be verified. Co-authored-by: Sandor Oroszi <sandor.oroszi@balabit.com>