diff options
| author | David Woodhouse <David.Woodhouse@intel.com> | 2015-10-29 14:16:45 +0000 |
|---|---|---|
| committer | qlong <qlong@Edk2> | 2015-10-29 14:16:45 +0000 |
| commit | 68547181f3c5b1c0a73e748b44be1f454e2f7e3c (patch) | |
| tree | 0dcb20e11819754d9d84c172704d1c75a1e2fa57 /Nt32Pkg/WinNtOemHookStatusCodeHandlerPei | |
| parent | e6eaada46861a2a7c5a5370d74dafc731a587786 (diff) | |
| download | edk2-platforms-68547181f3c5b1c0a73e748b44be1f454e2f7e3c.tar.xz | |
CryptoPkg/BaseCryptLib: Use X509_V_FLAG_PARTIAL_CHAIN
Since OpenSSL 1.0.2 we can set this flag on the X509_STORE to instruct
OpenSSL to accept non-self-signed certificates as trusted. So we don't
need two entirely identical copies of a verify_cb() function which makes
it ignore the resulting errors.
We also *didn't* use that verify_cb() function for X509VerifyCert(), but
probably should have done. So that can get X509_V_FLAG_PARTIAL_CHAIN for
consistency, too.
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Reviewed-by: Qin Long <qin.long@intel.com>
git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18703 6f19259b-4bc3-4df7-8a09-765794883524
Diffstat (limited to 'Nt32Pkg/WinNtOemHookStatusCodeHandlerPei')
0 files changed, 0 insertions, 0 deletions