wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-08-02 04:04:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

VerifyCallback with any reason

Browse Source
This commit is contained in:
Takashi Kojo
2017-07-28 11:42:21 +09:00
committed by Jacob Barthelmeh
parent 8336e02931
commit 2f1f86d5f2
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/internal.c
View File

@@ -8939,9 +8939,8 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
} }
#endif #endif
if (ret != 0) { if (ret != 0) {
if (!ssl->options.verifyNone) {
int why = bad_certificate; int why = bad_certificate;
if (!ssl->options.verifyNone) {
if (ret == ASN_AFTER_DATE_E || ret == ASN_BEFORE_DATE_E) { if (ret == ASN_AFTER_DATE_E || ret == ASN_BEFORE_DATE_E) {
why = certificate_expired; why = certificate_expired;
} }
@@ -8984,11 +8983,12 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
} }
#endif /* SESSION_CERTS */ #endif /* SESSION_CERTS */
} }
}
if (ret != 0) { if (ret != 0) {
SendAlert(ssl, alert_fatal, why); /* try to send */ SendAlert(ssl, alert_fatal, why); /* try to send */
ssl->options.isClosed = 1; ssl->options.isClosed = 1;
} }
}
ssl->error = ret; ssl->error = ret;
} }
#ifdef WOLFSSL_ALWAYS_VERIFY_CB #ifdef WOLFSSL_ALWAYS_VERIFY_CB