wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 16:42:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix from review

Browse Source
This commit is contained in:
Eric Blankenhorn
2026-04-29 10:33:16 -05:00
parent e0f753c0d6
commit 60d6fbe3f5
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/x509_str.c
+9 -1
View File
@@ -713,7 +713,15 @@ int wolfSSL_X509_verify_cert(WOLFSSL_X509_STORE_CTX* ctx)
* to restore the legacy permissive behavior.
*/
if (!issuer->isCa) {
/* error depth is current depth + 1 */
/* error depth is current depth + 1. The compat alias
* X509_V_ERR_INVALID_CA (= 79) lives in wolfssl/openssl/x509.h
* which is not always pulled into this translation unit
* (e.g. some linuxkm build chains). Define a local fallback
* so callers reading X509_STORE_CTX_get_error() see the
* OpenSSL-compatible value. */
#ifndef X509_V_ERR_INVALID_CA
#define X509_V_ERR_INVALID_CA 79
#endif
SetupStoreCtxError_ex(ctx, X509_V_ERR_INVALID_CA,
(ctx->chain) ? (int)(ctx->chain->num + 1) : 1);
#if defined(OPENSSL_ALL) || defined(WOLFSSL_QT)