Verify Callback Fix

1. Removed a flag set that would force all certificates in a chain
   to be verified. There was a compile time option to make that happen
   already.
2. Replace some options for some test failure test cases that were added
   and immediately removed.
(ZD 11292)
This commit is contained in:
John Safranek
2020-11-24 11:46:10 -08:00
parent f5c2bef78f
commit 4baf923218
2 changed files with 8 additions and 3 deletions
-2
View File
@@ -10017,8 +10017,6 @@ int DoVerifyCallback(WOLFSSL_CERT_MANAGER* cm, WOLFSSL* ssl, int ret,
/* Determine if verify was okay */
if (ret == 0) {
verify_ok = 1;
use_cb = 1; /* use verify callback on success, in case callback
* could force fail a cert */
}
/* Determine if verify callback should be used */