diff options
| author |  Eric Mertens | 2025-05-26 10:56:57 -0700 |
|---|---|---|
| committer | Eric Mertens | 2025-05-26 10:56:57 -0700 |
| commit | e192d1aad0fe5122fd9d575e236be24169e63e35 (patch) | |
| tree | 50006290a8e1ebc547eefa2af15620abda76697d | |
| parent | Improve UN/D/K/XLINE help files (diff) | |
| download | solanum-ignore_purpose.tar.gz solanum-ignore_purpose.tar.bz2 solanum-ignore_purpose.zip | |
Ignore certificate usage restrictions ignore_purpose
We only care about the certificate fingerprint; we don't care what CAs have to say about the certificates.
| -rw-r--r-- | librb/src/openssl.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/librb/src/openssl.c b/librb/src/openssl.c index 567aeee7..2d4036c1 100644 --- a/librb/src/openssl.c +++ b/librb/src/openssl.c @@ -587,6 +587,7 @@ rb_get_ssl_certfp(rb_fde_t *const F, uint8_t certfp[const RB_SSL_CERTFP_LEN], co case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: case X509_V_ERR_CERT_UNTRUSTED: + case X509_V_ERR_INVALID_PURPOSE: len = make_certfp(peer_cert, certfp, method); // fallthrough default: |