-
-
Notifications
You must be signed in to change notification settings - Fork 11.1k
Closed
Labels
resolved: answeredThe issue contained a question which has been answeredThe issue contained a question which has been answeredtriaged: questionThe issue contains a questionThe issue contains a question
Description
If you want to explicitly trust an intermediate certificate for certificate chain verification, you have to specify X509_V_FLAG_PARTIAL_CHAIN otherwise the leaf certificate is not verified. In practice any other major TLS library behaves like this by default not requiring any such extra verification flags.
What is the reason for having this as non-default behavior and should it be changed in the future major OpenSSL release?
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
resolved: answeredThe issue contained a question which has been answeredThe issue contained a question which has been answeredtriaged: questionThe issue contains a questionThe issue contains a question